PHP Security

Random stuff about serendipity. Discussion, Questions, Paraphernalia.
Post Reply
davecjr
Regular
Posts: 167
Joined: Fri Oct 29, 2004 3:09 pm
Contact:

PHP Security

Post by davecjr »

Are there any specific issues with Serendipity relating to the latest PHP security concerns?

One of the reasons I have been looking to move to another host was over PHP versions and now with the latest top stories with phpBB, I was wondering about how all this relates to Serendipity.
garvinhicking
Core Developer
Posts: 30022
Joined: Tue Sep 16, 2003 9:45 pm
Location: Cologne, Germany
Contact:

Re: PHP Security

Post by garvinhicking »

Hi Dave!

If you are using PHP prior to 4.3.10 you can be affected by the unserialize() bug, by which a user can spoof the authentication system - see the NEWS on s9y.org for more information on that.

Regards,
Garvin
# Garvin Hicking (s9y Developer)
# Did I help you? Consider making me happy: http://wishes.garv.in/
# or use my PayPal account "paypal {at} supergarv (dot) de"
# My "other" hobby: http://flickr.garv.in/
davecjr
Regular
Posts: 167
Joined: Fri Oct 29, 2004 3:09 pm
Contact:

Post by davecjr »

Thanks for the reply Garvin! I didn't notice 'News' post before I posted but that's about the way I saw things, thanks again. :lol:
Post Reply