[pmwiki-users] Online site analysis (was: Online test available ...)

Patrick R. Michaud pmichaud at pobox.com
Wed Sep 6 09:24:21 CDT 2006


On Tue, Sep 05, 2006 at 06:23:10PM -0500, Patrick R. Michaud wrote:
> Today I've quickly put together a system that allows wiki
> administrators to easily test if their site is vulnerable to
> the register_globals problem described earlier.  

Last I expanded the site analyzer a bit, and it has
a new location:

    http://www.pmwiki.org/wiki/PmWiki/SiteAnalyzer

At the moment it still only analyzes a site for basic connectivity
and for the $FarmD exploit, but it now also provides an option to
have a copy of the results saved on the pmwiki.org server.  This 
will make it easier for me to add more tests to the analyzer, as 
well as provide me with useful site configuration information 
that I can use to improve PmWiki's installation and customization
processes.

The choice to save results is entirely optional.  Any results that
are saved are stored in a private folder on my server and won't be
made public or available to others.

At this point I could really use analysis results from any sites
running on Windows-based servers, whether they're running Apache,
IIS, or whatever.  While I have a pretty good handle on Unix and 
OS/X based environments, I'm still uncertain about all of the ways 
in which Windows-based installations are set up, so this would 
be of great help.

Again, the starting page for analysis is at 
http://www.pmwiki.org/wiki/PmWiki/SiteAnalyzer, and questions
or comments are greatly appreciated.

Thanks!

Pm





More information about the pmwiki-users mailing list