Security advice ?

[Madhusudan Singh]

Hi
I have completed a PHP+ MySQL application that uses and stores
sensitive
data (uses SSL via https). My query is a little non standard here -

What can the designer of such an application do to mitigate the effects of
hackers getting into the system run by the hosting company ? I know nothing
is safe if they get root access, but I guess one's job ought to be to
design things that can make serious damage as unlikely as possible. Is
there a FAQ that deals with this aspect ?

Thanks,

MS

[Ruben van Engelenburg]

Madhusudan Singh wrote:

Hi
I have completed a PHP+ MySQL application that uses and stores
sensitive
data (uses SSL via https). My query is a little non standard here -

What can the designer of such an application do to mitigate the effects of
hackers getting into the system run by the hosting company ? I know nothing
is safe if they get root access, but I guess one's job ought to be to
design things that can make serious damage as unlikely as possible. Is
there a FAQ that deals with this aspect ?

Securityfocus published a nice paper on this subject the other day.
Check: http://www.securityfocus.com/infocus/1706
Good luck.

Regards,
Ruben.