Welcome Guest, Not a member yet? Register   Sign In
security vulnerability - being able to see your PHP FILE CODE?
#4

Do you have an upload function on your website? Maybe he uploaded an injected PHP file and got access to your files that way.
If you can't see the PHP code from accessing e.g. /application/controllers/Pages.php your Apache/Nginx are configured correctly.

If he could download all files in your .git folder, that means he got all your source code. Here you can find an article about it:
https://medium.com/swlh/hacking-git-dire...e60fa79a36

Accessing php-files from index.php? depends on how your application where developed and what version of CodeIgniter you got. CI 3.1.3 have some nasty bugs.
https://codeigniter.com/userguide3/chang...sion-3-1-3
Reply


Messages In This Thread
RE: security vulnerability - being able to see your PHP FILE CODE? - by jreklund - 08-05-2020, 08:12 AM



Theme © iAndrew 2016 - Forum software by © MyBB