I don't know if someone is hijacking the website or if PHPIDS is just got a poor arrangement but according to my security software they are using a certificate that is issued by an UNKNOWN Certificate Authority. Anybody have any ideas on what the deal is?

These downloads include PHP code and XML strings that contain complex regular expressions like those used in MOD_REWRITE. I haven't looked to analyze them but if security has been compromised then the code could become malicious at some point.

Comments

it-cru’s picture

it-cru
Primary language English
Location Munich
commented
Status: Active » Closed (won't fix)

PHP-IDS.ORG website used this type of certificate since I'm using and developing the drupal phpids module.

I'll sent Matthias from PHP-IDS.ORG an information so he could try to change this. This problem is only possible to solved by PHP-IDS.ORG website publisher itself, so status is changed to closed (won't fix) or better can't fix ;)