Security check please?

[Zhang]

For those of you who know, could you please check my site at http://www.easyshotz.com/ and see if you are able to find any security vulnerabilities? I'm using a php script that I'm totally unfamiliar with, and I want to make sure the site is secure before I start directing too much traffic to it.

 

[Dan]

I'm pretty sure that script is very secure, but I'm trying to do some stuff now.

edit:
It strips out anything after a " and 's do nothing.
You can't do anything like file.php.jpg, etc.

It's secure.

 

[iNod]

The script is made by celeron dude and all security vulnerabilities have been reporting and fixed. I have checked most of the versions, they are all 100% secure. Though there is always new ways.

- Steve

 

[Zhang]

Alrighty, thanks guys, I appreciate the reassurance.

 

[nick-8318]

you need to use htmlspecialchars or something similiar to that function on the registration page

 

[Camron]

It is very secure, but I do not like flat file scripts my self. I heard their was a turkish hacker which can destroy this script in a few clicks, check out CD's forum, it has his IP which you should block.

 

[Dan]

Blocking IP's is pointless. It's not hard to change it, especially if he's any good at hacking.

 

[iNod]

Depends.. I know alot of sites (mainly web hosts) that are using IP DB's to block all IPs from Africa and the Middle east. Not that there is a problem with there it is just that there is 10 times more fraud orders than real order from those areas. Mainly Nigeria.

- Steve

 

[Zhang]

I'm having to second guess the security on this...I can't seem to connect to the site anymore. I'm not sure if it's hacked or what. The information is still in the database, it should be functioning properly, but it's not even coming up.