topic Re: Security Problem in Archive

Security Problem (Website hosting & domains)

Sogo7 — Wed, 16 Feb 2011 20:56:47 GMT

Hi there,

I have several questions relating to general server security and the Terms of Service,

could somebody who actually understands please respond. I've been patient, polite

and even prepared to give BT tech support another chance. However fail me again

and will have no choice but to take business elsewhere.

1. Is the cURL option of FOLLOWLOCATION permitted ?

2. Are any outgoing requests blocked on Port 80: ? for example file_get_contents (http://google.co.uk/)

3. Are SMTP mail scripts allowed

4. What are the server resource limits and what happens if they are breached?

Come on BT tekkies and tekets', even some flea bitten free web hosting provider running out of a campus dorm can answer these questions upon request.

Re: Security Problem

MalcolmW — Wed, 16 Feb 2011 20:58:35 GMT

Hi Sogo7, first off i would just like to say in defence of BT frontline tech that we are not all trained to answer such a technical question. It is only with training and practice in web hosting/design and an understanding of PHP/DNS IIS and apache that anyone could answer your question and give the correct answers.

That being said and as you say any host should be able to answer these questions.

I am able to answer question 3 with confidence and say YES but that you must use localhost in your script. The other questions relate I guess specifically to PHP/DNS or server security which I am not confident to comment on in this post. Maybe one of our other forum members can add there own comments.

I am not aware of our hosting platform blocking any outgoing requests over port 80.

Regards

Mal

Moderators can we move this post to

Website hosting & domains

Re: Security Problem

Sogo7 — Thu, 17 Feb 2011 15:51:14 GMT

Hello Mal

I appreciate that frontline supports technical capabilities are restricted by design in order to cost effectively cater for the bulk of clients requiring assistance.

So if somebody here with a site could run a web page with the following PHP command:

phpinfo();

and then post the results back to this thread it would be a tremendous help in answering some, if not all of the technical questions. (it's quite harmless for details look here).

As for the un-published terms and conditions relating to server resource usage, I guess that I will have to wait while second line support bumps it to third line support for a reply.

Re: Security Problem

MalcolmW — Thu, 17 Feb 2011 18:50:26 GMT

Hi Sogo7, I see. So you do not yet have hosting with BT but perhaps considering hosting with BT? I do not have a site myself so unable to run the PHP command for you but maybe one of our other forum members does have hosting and would be willing to run this script for you. On the other hand you say that second line are dealing with a request so maybe I am wrong and you do have hosting with BT. If this is the case what package do you have. Is it the BT Started pack £5 p/m or pro £15 p/m? You can view a comparison of these packages here

I have used this script in the past and understand it is harmless.

Regards

Mal

Re: Security Problem

Ian1974 — Fri, 18 Feb 2011 14:52:43 GMT

As requested please find attatched a document of the php information.

Kind Regards,

Ian Ferrier

BT Business Domains

Re: Security Problem

Sogo7 — Sat, 26 Feb 2011 17:38:28 GMT

Thankyou Ian.

Your message appeared shortly after recieving a similiar set of results from the archives of the local chapter of 'security enthusiasts', they were very helpful and gave some interesting insights.