Archive for the ‘Security’ Category

Hackers scanning IP ranges

Thursday, August 28th, 2008

Well, I have to say, this is quite a clever way of looking for potential targets! We have a Chinese hacker (the IP is Chinese) who is apparantly checking all the IP addresses in our new block for vulnerabilities. This is more impressive than the usual brute-force attacks we say day to ...

The low hanging fruit of PHP

Thursday, July 31st, 2008

Well, I'm very suprised, I would have expected to have been asked about this at least at some point over the last 4 years. We do not enable the PEAR library by default for any of our web hosting customers. Suprised? Don't be, with major security flaws like this one is ...

PHP6 and magic quotes

Wednesday, July 23rd, 2008

A little advanced warning here, PHP 6 is in development and the developers of PHP have decided to remove magic_quotes(). For those of you who don't speak fluent PHP, magic_quotes() is a feature built into PHP, designed primarily to protect websites from SQL injection techniques. Unfortunately, lots of developers have used ...

Anti-spam

Wednesday, July 23rd, 2008

Several of our customers have been in touch over the past few months wondering why they can't send email through our systems. In literally 95% of these cases, it's because they have somehow been allocated an IP address that is tagged as belonging to a spammer. Leading Edge Hosting use what's called ...

Scary PHP Functions you should disable…

Tuesday, June 17th, 2008

We have just completed a security update on one of our main servers and whilst we were performing the update we realised that there is a distinct lack of information out there concerning the security of PHP functions, and no good lists of functions that should be banned or switched ...