Back to FAQ Index

Why Do I Need NukeSentinel™?

Why Do I Need NukeSentinel™?

PHP-Nuke and PHP-based websites in general have been susceptible to various types of improper access and defacement via techniques like cross-site scripting (XSS), SQL injection, and others. The worldwide popularity, modular design, public access to all source code and database design, and multiple public support websites are both a blessing and a curse to the hundreds of thousands of web masters using PHP-Nuke-based websites.

Unlike those of proprietary systems, PHP-Nuke's security flaws are available for all to see. These flaws are further exaggerated by similar issues with both PHP itself and the commonly used open-source database MySQL, which is used by the majority of PHP-Nuke websites. This volatile mix has given birth to a plethora of web “gangs” - teams of (usually young, attention-seeking) miscreants (often referred to as “script kiddies”) who use published attacks on PHP-Nuke web sites. Since the majority of these attacks are attempts to gain improper access to the PHP-Nuke database, NukeSentinel™ can provide a highly effective level of protection.

This Q&A was found on: http://freesoftwarereviews.org/modules.php?name=FAQ&file=index&myfaq=yes&id_cat=1