techbits.de » phpwebchecksum http://www.techbits.de thoughts on hardware, software, development and tech news Fri, 02 Dec 2011 22:51:07 +0000 en hourly 1 http://wordpress.org/?v=3.2.1 PhpWebChecksum to be released soon http://www.techbits.de/2006/01/11/phpwebchecksum-to-be-released-soon/ http://www.techbits.de/2006/01/11/phpwebchecksum-to-be-released-soon/#comments Wed, 11 Jan 2006 19:34:15 +0000 Florian http://www.techbits.de/2006/01/11/phpwebchecksum-to-be-released-soon/ Continue reading →]]> The first version of my php script to monitor changes in your website will be released soon. I already set up a sourceforge account for PhpWebChecksum which will be mainly used for bugtracking, and maybe source code management (CVS) and file storage for releases for now. The projects homepage will be hosted on techbits.de under /projects/phpwebchecksum which is already available as well. At this point I have to make sure I can use Keith Devens’ PHP XML Library which I included in my php script and figure out how I’ll solve the pass-by-reference issue when switching between PHP4 und PHP5.

Here is another teaser screenshot of the main form with header, footer and some design improvements:

main form with some design improvements

]]> http://www.techbits.de/2006/01/11/phpwebchecksum-to-be-released-soon/feed/ 1 Checking websites for intrusions http://www.techbits.de/2006/01/05/checking-websites-for-intrusions/ http://www.techbits.de/2006/01/05/checking-websites-for-intrusions/#comments Thu, 05 Jan 2006 22:26:19 +0000 Florian http://www.techbits.de/2006/01/05/checking-websites-for-intrusions/ Continue reading →]]> When I recently installed this blog a thought about how you could monitor a website for intrusions. Almost all sites use some kind of content management system, blog or other portal software. Unfortunately we all know that software does have flaws an that there are script kiddies out there who do not hesitate to exploit them as soon as they are found. Since most of the small sites and blogs are hosted on simple PHP/MySQL webspace it is not as easy to monitor the integrity of your site when the web application has hundreds of files buried deep in a directory hierarchy and you only have FTP access to browse through it.

I googled for tools that create checksums for websites but I didn’t find much, so I started on creating a PHP application for that that purpose. My prototype has the following functionality:

  • generating an xml list with checksums (SHA1) and file dates for a complete directory tree
  • the xml list can be downloaded to be stored locally
  • the xml checksum list can later be uploaded to be compared against the current state of the website
  • a comparison is computed and display showing all modified, new and missing files with the information what (date, size, checksum) has been modified.

Here are two screenshots that show the current development version:

Main Form - generate and compare checksumsChecksum Comparison View

I will continue working on this tool and make it available as open source when it’s fairly stable.

]]> http://www.techbits.de/2006/01/05/checking-websites-for-intrusions/feed/ 0