Re: Most secure hosting company?
I do a lot of vulnerability verifications ranges from binary ****ysis to web application source code audit. I can tell you that as a matter of fact , yes, PHP apps are really quite darn common to be attacked. We have reports about them on a daily basis. Most bugs are file inclusions/traversals, XSS, cookie manipulations, XSRF, SQL Injection. However, a lot of these vulnerabilities must pair up with an older version of PHP in order to work "properly", or one that's poorly configured. So all those PHP bugs you see in public aren't always exactly a threat to you.
|