Windows Specific Exploits Prevention for Windows

Prevention for Unix Systems


Never run the web server as root, as anyone who can exploit a flaw in a script can essentially do anything on your Unix system. One such example is parsing the input from a email address:

nobody@home.com;/bin/rm -fr /[c-z]*

The parser would hit ‘;’ and turn command into the shell, whereby if you are running under root, would essentially wipe out your system.