Security advice ?

[Madhusudan Singh]

Hi
I have completed a PHP+ MySQL application that uses and stores
sensitive
data (uses SSL via https). My query is a little non standard here -

What can the designer of such an application do to mitigate the effects of
hackers getting into the system run by the hosting company ? I know nothing
is safe if they get root access, but I guess one's job ought to be to
design things that can make serious damage as unlikely as possible. Is
there a FAQ that deals with this aspect ?

Thanks,

MS

[Ruben van Engelenburg]

Re: Security advice ?

Madhusudan Singh wrote:[color=blue]
> Hi
> I have completed a PHP+ MySQL application that uses and stores
> sensitive
> data (uses SSL via https). My query is a little non standard here -
>
> What can the designer of such an application do to mitigate the effects of
> hackers getting into the system run by the hosting company ? I know nothing
> is safe if they get root access, but I guess one's job ought to be to
> design things that can make serious damage as unlikely as possible. Is
> there a FAQ that deals with this aspect ?[/color]

Securityfocus published a nice paper on this subject the other day.
Check: http://www.securityfocus.com/infocus/1706
Good luck.

Regards,
Ruben.