Hacked?

[spacegirl]

In a different thread (now locked) Miriam questioned whether the forum had been hacked to post in Peter's name.

I don't know the answer to that, but I did have a comment regarding hackability. This forum appears to be based on php. I once took some lessons in php programming. I wouldn't say that I was good at it. But the lessons made a special effort to warn people how inherently unsafe php is, how there are so many ways to hack it. Every single byte of information either coming or going has to be checked beforehand to make sure it doesn't have any php or sql statements in it, even pictures.

[notodd]

Would you like to elaborate on that? What on earth are you talking about, or have I led a sheltered life?

[fraulein_Maria]

[QUOTE=notodd;21332]Would you like to elaborate on that? What on earth are you talking about, or have I led a sheltered life?

>>> sheltered life. first :sign16: now ehem :teach:

this website uses a particular software to run called *** software can be "hacked" that is, broken into (like a house can be)..... usually by bored teens, but occassionally those with nefarious motives (like those that hate fags... disgruntled ex.members etc.)

If its a bored teen, they'll just post something silly for the fun of it. Those with nefarious motives have crashed our site before.

There are several ways to prevent this from happening...

The easiest is to use less hackable software. Like a house with better locks. Sadly, this usually requires $$$. Another solution would be to host the site on ones own computer and run it as a Linux server. Now the house has only one possible, same way in and out. This would require a capital investment of a few hundred dollars, but the fix would be permanent.

Some would argue that Linux software can be hacked aswell. The answer is Yes and No. Yes it can be, but if one sets it up properly (IE, no foolhardy back doors) it doesn't have to be.

Hope this helps. :)

[spacegirl]

What I was commenting on was that even if you run your own web server, board software using php is prone to being hackable because php itself has a lot of natural security holes, and it takes over the computer which runs it. It's possible to write your php programs to check every incoming and outgoing byte before those bytes have a chance of adding up to a php command and allowing a hacking. But it seemed to me that was kind of like a bandaid.

[notodd]

Thank you for explaining that.

Although I know how to turn the computer on, and how to do various problem solving, I was never into programming and how exactly the darn thing works. In other words, I'm not being thick, just confused.

:confused_

Cheers!

[Kailana]

no worries Notodd, I should have some skills but apparently fortran and c arent of much use these days especially when I forgot most of that junk over a decade and a half ago.

so its ok if you are confused, as I am generally thick or muddleheaded most of the time when it comes to computers these days. hell think it took me a good half year or so just to understand what people meant by posting a link.

[joneyhits]

The only way to be sure a computer can't be hacked is to burry it under tons of cement. Having worked in IT for almost 3 decades, I know all I can do it to make it a person spend more resources than it is worth to get in.