On 03/10/08 Alex H. Vandenham said: > OK, it's an irc bot that got on my system in some way - probably (?) a php > exploit. If anyone knows what I have to do to tighten up php to prevent file > uploads from inserted urls - help much appreciated! > > After deleting the bot files in /tmp the tcp traffic to ports 6660-7000 is > gone after a system restart. A full upgrade and re-install appears to be in > my future . . . Stop using PHP. No, seriously. It has a horrid security record. Mike
Attachment:
pgpfY1ySUZIay.pgp
Description: PGP signature