Surpass Web Hosting Forums - View Single Post - [Big Changes] PHPsuexec to be implemented on new servers

**Kayla** · September 17th, 2006, 11:28 PM

Quote:

"Even scarier, ha.ckers.org reports that the very same information can be used by hackers for penetration testing. Suppose PHP is being run as a module, not a CGI. One of the other virtual hosts on your server is running an old exploitable version of PHPbb — a notoriously insecure web application; its historical vulnerabilities are listed here. This is great information, as a hacker could compromise the PHPbb installation and gain access to your data by extension.

So, having different IPs — even within the same range, makes it much harder to form any conclusions from the available information. Two sites on consecutive IPs may be related, but they also may not be. They may be on the same machine, but they also may not be. That's one of the reasons why I prefer having my own dedicated IPs. I'd also avoid any shared hosting that runs PHP as a module"

http://www.seoegghead.com/blog/seo/v...ility-p83.html