New Santy Mutant Offers 'Help'
233929
Ziff Davis - Anti-Santy-Worm V4 attempts to patch vulnerable Web forum software but might cause denial-of-service attacks.
641738
In a new post to his blog, Robert Swarthout about a PHP frontend he's been developing for working with Subversion repositories:   The frontend needed to be designed in such a way that each developer could access their working copies and make the full range of actions against them. I decided to also use an AJAX setup so that pages would be quickly loaded and updated by a single toggle of a folder.   A few issues popped up, including tracking edits correctly through the interface. His solution revolved around an Apache MPM that could serve different pages to different users and groups. With this solution in place, the functionality could be built up, a list of which he provides including:  create working copy from repository (svn checkout) svn blame svn delete search files (via a grep/find combination, omitting .svn folders) svn rename
407014
Santy Virus Used Google To Hack phpBB Forums  There is a new internet worm is defacing web bulletin boards across the world, and its using Google as its. The Perl/Santy-A worm (also known as Santy) exploits a vulnerability in a piece of software often used to provide discussion forums and bulletin ...
193142
The Santy worm, which searches Google for sites that use a vulnerable version of the search engine&#39;s technology, is being tackled by Google.
505110
Last week a new worm started spreading on the Internet. It&#39;s named Santy, and it attempts to deface websites using specific versions of the popular phpBB bulletin board software.
610973
This article discusses the use of Libwhisker, a PERL module which allows for the creation of custom HTTP packets and can be used for penetration  testing various web applications.
672973
Making use of the current trend to send festive greetings via email, a new virus is making the rounds. A variant of the ZAFI worm, the WORM_Zafi.
273824
Virus writers have grafted a network sniffer into the latest variant of the SDBot worm series. So far there are no reports of SDBot-UH in the wild but the inclusion of selective network sniffing along with
620094
roundup Free-roaming source code breeds new Netsky pest. Also: From IE to Opera, browsers are a likely prey.
289622
According to this new advisory from Secunia today, the SuSE linux group has released a new package update for the PHP4 distribution on their operating system:   SUSE has issued an update for php4. This fixes some vulnerabilities and a weakness, where one has an unknown impact and the others can be exploited by malicious, local users to gain escalated privileges, and by malicious, local users and malicious people to bypass certain security restrictions.   The issue is marked as "Less critical" but it's still a good idea to update, especially when it relates to security issues. You can find more information at the original advisory on the Novell site.
515933
Evolt.org has a new tutorial posted today concerning something that I still get a lot of questions about - creating a PHP Login System with Admin Features.
654370
Pierre-Alain Joye has a little reminder posted to his blog today about two posts from planet-debian and Apache that refer to clones/references in PHP4 and PHP5 and some of the misconceptions presented there.   Reading planet-debian and Apache (from Sven and David), I catched two posts about clones and references in php4 and php5. I do not think it is worth to explain again everything here as Sara wrote a very good post already, check it out here.   He mentions his annoyance with articles/posts like these and the impact that it has on PHP as well as the person posting.   I wonder when the OS community in general will be mature enough to stop bitching at each other. And that's valid for PHP developers, gnome-kde and other well established wars.
690580
On the Dotvoid.com blog today, there's a new post that shares some handy code to parse out information from the incoming user agent string for the visitors for your site.   Recently I experimented a bit with an Apache log file analyzer written in PHP. It's not all that difficult were it not for trying to parse the browser, or user agent, string. [...] For my purposes I don't care much for the operating system details. This is the result so far. I'm still not very satisfied but I thought maybe other people might be interested and maybe help out.   He provides the code in the format of an encapsulated PHP function that returns the product they're using, the version number of the browser and other various comments.
558542
Easy-peasy-sleazy: A new piece of PHP code making the malware rounds can install a phishing site on a compromised server in about two minutes.
315974
"It's like they wanted to help us, which is weird," says one security expert of the latest bizarre twist in the worm's development.
711226
PHP Magazine has a new link today to a tutorial covering Building and Installing PHP, Apache on Mac OS X 10.3.5 with GD
134862
In a post a little while back, Padraic Brady wrote about an extension he whipped up to act as an interface between PHP and the Snarl notification tool (inspired by Growl from OS X).   My intention for the API is to facilitate Window's use of a soon to be announced tool for autotesting in PHP using PHPSpec.    He wants to use it in an automated testing environment that, when tests are detected in the current tests, runs the changed items and reports back the results via the Windows notification service. You can grab the code from the Google Code repository for it and test it our for yourself.