[pmwiki-users] Online site analysis (was: Online test available ...)
Patrick R. Michaud
pmichaud at pobox.com
Wed Sep 6 09:24:21 CDT 2006
On Tue, Sep 05, 2006 at 06:23:10PM -0500, Patrick R. Michaud wrote:
> Today I've quickly put together a system that allows wiki
> administrators to easily test if their site is vulnerable to
> the register_globals problem described earlier.
Last I expanded the site analyzer a bit, and it has
a new location:
http://www.pmwiki.org/wiki/PmWiki/SiteAnalyzer
At the moment it still only analyzes a site for basic connectivity
and for the $FarmD exploit, but it now also provides an option to
have a copy of the results saved on the pmwiki.org server. This
will make it easier for me to add more tests to the analyzer, as
well as provide me with useful site configuration information
that I can use to improve PmWiki's installation and customization
processes.
The choice to save results is entirely optional. Any results that
are saved are stored in a private folder on my server and won't be
made public or available to others.
At this point I could really use analysis results from any sites
running on Windows-based servers, whether they're running Apache,
IIS, or whatever. While I have a pretty good handle on Unix and
OS/X based environments, I'm still uncertain about all of the ways
in which Windows-based installations are set up, so this would
be of great help.
Again, the starting page for analysis is at
http://www.pmwiki.org/wiki/PmWiki/SiteAnalyzer, and questions
or comments are greatly appreciated.
Thanks!
Pm
More information about the pmwiki-users
mailing list