Re: WebServer and Firewall Help

[Curtis Maurand <cmaurand () xyonet com>]

On 2/8/2011 3:00 PM, Joshua Klubi wrote:
> > > I want to know what measure i can do on the server to get it protected which
> > > mysql protection
> > > I should implement. since i can see that it might be a php or mysql
> > > injection that is been used.
> > >
> > > Currently I run these security measures on it.
> > > Ubuntu UFW
> > > Fail2ban
> > > PHP model security
> > > Apache security
> > >
> > > Joshua
> > the problem may not be your operating system but the web application running.  what web application/s are on that box?

I agree, you've got other problems.  I would look at defending against 
sql injection attacks and I would look to making sure that all the 
passwords get changed.