Script to delete all php files in image directory

[demastermind 1]

Hello,

I light bulb justed flicked on! What if we used a php script to delete all the php files in the images directory and have deleted files logged to a database table! The php file that does the work could be triggered by a cron job. Could that be a solution to HELP ward off attacks that place php files in the image folder?

 

- Luc

[Guest]

Luc,

 

 

Clean and secure your website and you won't have to write a script to remove PHP files.

 

 

 

 

 

Chris

[demastermind 1]

Luc,

 

 

Clean and secure your website and you won't have to write a script to remove PHP files.

 

 

 

That defiantly is the way to go, but It would still be a good precaution.

[germ 233]

A secure site doesn't get unwanted files in the images folder in the first place.

 

You're treating the symptom, not curing the disease...

>_<

[burt 5,612]

Agree fully with the others that is bolting the stable door after the horse has got out.

 

But if you want it;

 

$php_files = glob('images/*.php');
foreach ($php_files as $php_files_deleted) {
 unlink($php_files_deleted);
}

 

May work. Untested.

[sucuri 1]

The main issue is that if an attacker uploads a shell to your images directory, he can use that shell to upload more backdoors in other parts of your site.

 

So removing the .php from the images directory will not protect you against it...

 

thanks,

[satish 24]

Deleting .php script is ok but if you control that thru .htaccess those php files will be useless as they will not get executed.

 

So use both.

 

Satish