Security

This isn’t a complaint, just thought it was interesting. I use Geeklog for my hosted site, I was going through the logs on my home firewall and noticed that the IDS (Intrusion Detection System) was showing attacks coming from my website. It logged the attack as “WEB-PHP content-disposition” I researched the attack and found that it was a Buffer Overflow venerability that affected PHP 3-4.2 here is what I found on Securityfocus.com about the attack:

Why and how can they panetrate? so sad....what can I do....they deleted my whole admin folder

Anyone who's paranoid about HTML in user comments, cross-site scripting attacks, or even just me coming along and covering up your site logo with nasty images should look at Simon Willison's SafeHtmlChecker php class. Elegant solution (and it'll help with XHTML validation too).