03-31-2009, 05:49 AM
|
|
Member
|
|
Join Date: Feb 2009
Posts: 10
|
|
Quote:
Originally Posted by IrPr
if i disable all c99's necessary functions then how could you use c99 shell on my server even without any mod_security rules defecting c99 shell?
|
You know that php shells are using lots of php functions which are using by otner normal php scripts (etc oscommerce, joomla)
If we disable this functions other customers scripts has been blocking.
Quote:
|
The only way to patch this exploits is disabling proc_open function
|
If we disable this, it can break any php script?
And finally, gotroot paid and real time rules, blocking %99 of php exploits on milw0rm and packetstorm. Did you try it? |