Re: [tlug] hello from a new / old member

[Godwin Stewart <godwin.stewart@example.com>]

On Fri, 10 Mar 2006 00:31:31 +0900, "Stephen J. Turnbull"
<stephen@example.com> wrote:

> Well, I'm seeing about a dozen different ooh-do-me-do-me.php URLs.  So
> I think the vulnerability is the use of PHP.

Precisely my point. It's in the use of PHP, not in PHP itself.

> Oh, I'm curious to see who knocks; I just don't need to know how many
> different accounts/passwords they've managed to collect to date.

Use iptables to log the attempts.

-- 
G. Stewart - godwin.stewart@example.com

How doth the VAX's C compiler        How patiently it seems to run
Improve its object code.             And spit out error flags,
And even as we speak does it         While users, with frustration, all
Increase the system load.            Tear their clothes to rags.

Attachment: pgp00011.pgp
Description: PGP signature