Cautions about using scripts

StephanieCordray · 05-03-2006, 02:05 AM

I'm not going to go into detail but I think there are enough people here asking questions about scripts and web apps that it needs to be said somewhere. If it's not in the right place, ian can kindly move it to the appropriate forum.

Once you've successfully installed and configured a script or web app your job is not done. It won't run forever with that configuration nor will it stay secure with that version for very long. There are a lot of nasties out there just waiting for opportunities to exploit vulnerable scripts.

As far as configuration and versions. Versions change to keep up with the updates and patches to things like mySQL and php. If you don't keep track and update when new versions come out there will come a time when your stuff just won't work right any more because they are incompatible with the newer versions of the stuff they use to operate. Kind of like Windows XP won't run very many programs from Windows 95 or 98 or ME for that matter.

So, peeps, never forget to check for updates to the apps you are using. The more important they are to your site the more often you need to check on current versions of them.

I'm not ranting. It just occurred to me that this is not something that is often addressed when members ask about how to do this or that, or wanting to use a content management system or a form script or any number of other database driven scripts. The reason it occurred to me is a customer has put himself in such a position and is looking at a lot of work to get it straightened out.

Your hosting services don't service the scripts for you nor are they required to. They just give you the tools to be able to use them... but because I'm a nice lady...

***ian*** · 05-03-2006, 09:18 AM

Well said, although updates are sometimes still not enough to protect you, they certainly help. Although sometimes, these lessons are only learned by mistake.

StephanieCordray · 05-03-2006, 01:24 PM

Thank you and you're right. Updates won't keep all the nasties out but they sure help keep some of them at bay.

Splendidesign · 06-05-2006, 05:57 PM

You can normally find the updates on the script provider's site i.e. http://www.php.net/

StephanieCordray · 06-06-2006, 09:28 PM

Quote:

Originally Posted by Splendidesign

You can normally find the updates on the script provider's site i.e. http://www.php.net/

Yah... I know... the problem is, a lot of people will install a script and run it for years in an unpatched, unguarded, and unupdated state and are stymied later when it breaks because it will no longer run with other software upgrades on their servers.

05-03-2006, 02:05 AM	#1 (permalink)
StephanieCordray Diamond Member Join Date: Dec 2004 Location: Nashville TN Posts: 1,017	Cautions about using scripts I'm not going to go into detail but I think there are enough people here asking questions about scripts and web apps that it needs to be said somewhere. If it's not in the right place, ian can kindly move it to the appropriate forum. Once you've successfully installed and configured a script or web app your job is not done. It won't run forever with that configuration nor will it stay secure with that version for very long. There are a lot of nasties out there just waiting for opportunities to exploit vulnerable scripts. As far as configuration and versions. Versions change to keep up with the updates and patches to things like mySQL and php. If you don't keep track and update when new versions come out there will come a time when your stuff just won't work right any more because they are incompatible with the newer versions of the stuff they use to operate. Kind of like Windows XP won't run very many programs from Windows 95 or 98 or ME for that matter. So, peeps, never forget to check for updates to the apps you are using. The more important they are to your site the more often you need to check on current versions of them. I'm not ranting. It just occurred to me that this is not something that is often addressed when members ask about how to do this or that, or wanting to use a content management system or a form script or any number of other database driven scripts. The reason it occurred to me is a customer has put himself in such a position and is looking at a lot of work to get it straightened out. Your hosting services don't service the scripts for you nor are they required to. They just give you the tools to be able to use them... but because I'm a nice lady...

05-03-2006, 09:18 AM	#2 (permalink)
*ian* Administrator Join Date: Aug 2004 Posts: 1,639	Well said, although updates are sometimes still not enough to protect you, they certainly help. Although sometimes, these lessons are only learned by mistake. __________________ Computer Forum

06-05-2006, 05:57 PM	#4 (permalink)
Splendidesign Bronze Member Join Date: May 2006 Location: UK Posts: 26	You can normally find the updates on the script provider's site i.e. http://www.php.net/ __________________ Splendidesign-Turning ideas into reality

Thread Tools
Show Printable Version Email this Page
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode

05-03-2006, 01:24 PM	#3 (permalink)
StephanieCordray Diamond Member Join Date: Dec 2004 Location: Nashville TN Posts: 1,017	Thank you and you're right. Updates won't keep all the nasties out but they sure help keep some of them at bay.