PHPIDS

PHPIDS is now on GitHub and uses GIT as our version control system. We will also use the GitHub issue tracker from now on. We look forward your pull requests!

So – where do we start? Well – first of all: PHPIDS 0.7 is ready to use. It’s been quite some since we squeezed out the last release and lots of things happened in-between. We mostly recovered from the domain problems we had some months ago and either site and Forum have come back to [...]

The PHPIDS website has been unavailable and in a chaotic state for quite some time, due to some unfortunately so far unsolvable domain seesaw. Our old domain php-ids.org seems gone forever but we decided to continue with our backup domain phpids.org and use the time to move to a new server. The old Trac is [...]

It’s been a while since the last official release – a bit more than four months to be precise. A lot if things happened in between – not too many bypasses but a lot of minor fixes and changes to deliver more precise detection results and fewer false alerts. Johannes Dahse, Roberto Salgado, LeverOne and [...]

It’s been quite a while since we released the 0.6.3 – and a lot of things happened during the past months. The PHPIDS has experienced several small but very important changes – including the obligatory detection or more attack patterns thanks to the incredible submissions by LeverOne and Gareth Heyes as well as and major [...]

Time to announce a new release of the PHPIDS. Upgrading is highly recommended since this release features several security fixes against not yet published but working attack patterns. Don’t miss the PHP specific talks at this years POC in Korea in early November to learn more about. Furthermore several bugs with the JSON mode were [...]

Today PHPIDS 0.6.2 was born so we’re pleasured to announce this important release to the public. PHPIDS 0.6.2 can be considered as a bug-fix release – taking care of several minor and major problems. Among other issues we fixed a bug with the key scanning feature and extended the rules to detect more attack patterns. [...]

Pascal Naujoks just dropped us a line today about the PHPIDS for TYPO3. Here’s what he wrote: Now the PHP Intrusion Detection System is also available for the enterprise Content Management System TYPO3. PHPIDS for TYPO3 comes as a regular extension for Typo3 which makes it easy to install and configure. The main features, beside [...]

We are happy to announce the latest official release of the PHPIDS. This time we added tons of bug-fixes for issues reported by our users such as better compatibility with PHP 5.2.0 for the Debian Etch crowd, optimized caching features, a lot of tidying and of course fixes against latest filter rule circumventions. Credits and [...]

The banner below says most that has to be said. Parts of the PHPIDS team and some of it’s best challengers and supporters will be at the BruCon 2009 late middle of September in Bruxelles. The schedule can be found here – changes and other news might be announced here. Be sure to have a [...]