security vulnerability - being able to see your PHP FILE CODE? |
Do you have an upload function on your website? Maybe he uploaded an injected PHP file and got access to your files that way.
If you can't see the PHP code from accessing e.g. /application/controllers/Pages.php your Apache/Nginx are configured correctly. If he could download all files in your .git folder, that means he got all your source code. Here you can find an article about it: https://medium.com/swlh/hacking-git-dire...e60fa79a36 Accessing php-files from index.php? depends on how your application where developed and what version of CodeIgniter you got. CI 3.1.3 have some nasty bugs. https://codeigniter.com/userguide3/chang...sion-3-1-3 |
Messages In This Thread |
security vulnerability - being able to see your PHP FILE CODE? - by shez1983 - 08-05-2020, 05:07 AM
RE: security vulnerability - being able to see your PHP FILE CODE? - by InsiteFX - 08-05-2020, 06:54 AM
RE: security vulnerability - being able to see your PHP FILE CODE? - by shez1983 - 08-05-2020, 07:38 AM
RE: security vulnerability - being able to see your PHP FILE CODE? - by jreklund - 08-05-2020, 08:12 AM
|