PHP Developers Summit 2010

When: 8:00 AM – 5:00 PM – January 30, 2010, Saturday
Where: Hotel Rembrandt – 26 Tomas Morato Extension Quezon City, Philippines
Google Map Location

In partnership with Microsoft Philippines, PHP User Group Philippines
presents PHP Developers Summit 2010. We are inviting you to come and join us in this gathering of the country’s best tech-talents, professionals and web developers promoting the use of PHP and open source solutions in the enterprise and schools. Free flowing coffee with lots of freebies and raffle prizes! So what are you waiting for?

Registration starts at 8:00 AM. See you all there! ^_~

Speakers:

Sponsors:

Microsoft Philippines
Zend
Globe Labs

Limited Special Offer

If you register early and pay within the year 2009, you’ll get a
ticket for only Php 1,000.00 and we’ll give you One (1) FREE Microsoft
limited edition thumb drive.

Registration and Ticket Payment Instructions

Online registration website is currently being tested right now. In
the mean time, you could pre-register by sending your name, position,
company and contact details to chean [ at ] phpugph [ dot ] com and by settling your
ticket payment through bank deposit:

Bank Name: Banco de Oro (BDO)
Account Name: PHP User Group Philippines Inc.
Savings Account No. 290226988
Branch: San Juan Branch

To all who would pay for the event tickets, kindly send me a scanned
copy of the deposit slip for payment confirmation.

Thank you very much.

Truly yours,
Cherrie Ann B. Domingo
President
PHP User Group Philippines Inc.

Email: chean [ at ] phpugph [ dot ] com
Web: http://www.phpugph.com
Mobile: +63917.865.2412
Phone: (02) 975.6976

Update: PHPUGPH’s SMF maliciously attacked. Now back online

I’ve done an audit on the files of phpugph.com’s SMF board and found that a certain user who’s only identity is krisbarteo@gmail.com using the IP 94.142.129.147 appended spam links to the Settings.php of SMF.

I’m no security expert, but I think what he did was he uploaded an avatar with a PHP code inside it, found a server/script exploit and ran it. I opened up the avatar (after looking for it for hours) and found this code (see below screenshot). Then he launched the attack from there appending malicious links on a file that is being included everytime SMF draws a page.

A quick Diff on SMF’s base files and our SMF files revealed that a new readme.php was created. And it contained the following:

Decoding that garbled texts reveals that readme.php was run on the browser and that was the main cause of appending links on the Settings.php.

I am still baffled by the fact that some people would do such things. Disrupt service for profit? Well, as forĀ  krisbarteo, yes you’ve succeeded in doing that. Then what? Happy now? If you only have used that smarts and skills on the good stuff, you’d probably be rich by now.

To all PHPugers, we hope that this thing doesn’t happen again even if we all know that the Internet isn’t safe from these crackers. It’s all good. For now.

More Articles

Mployd.ph Offers PHPUGPH Members 1-Year Free Subscription

Globe Innovation Convention: Globe Labs Launch – “Enriching lives through Innovative Communications”

Top 25 Active PHPUGPH Users