Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

How I can check all my images on server, they don't prepared with maulicious code ?

I mean for example Gif PHP exploits and so on...

share|improve this question
    
What platform are you running? Kind of determines what tools are available to you. –  Bart Silverstrim Oct 18 '10 at 12:19
    
Linux environment –  astropanic Oct 18 '10 at 12:51

2 Answers 2

up vote 1 down vote accepted

Is this a homework question?

How to harden a server is well beyond the scope of an answer here - as is an introduction to writing secure systems or application level firewalling or systems management. Suffice to say that you should take adequate measures to ensure that it should not be possible to deploy malware on your server. But even if you're an expert systems/network admin and programmer then monitoring the integrity of your system should still figure in your defences.

Gif PHP exploits

I assume you mean something like this. As above this kind of attack is only possible if your webserver is configured to allow it and you are dumb enough to allow users to upload unverified content into your document root.

But as I said, even if you've plugged all the security holes, you should still run an integrity checker to check for unauthorized file modifications - go track down a suitable host-based IDS for your operating system (you didn't say what that was) and start monitoring your file signatures and compare them with an offline list.

share|improve this answer

I used ImageMagick--a image editing software library you can integrate into any exisiting programing language, to convert each image from its type to another type and back again to be able to remove "extra" data or code. This might be too much of a solution if you need to process many images--but worth a thought as well as the security mentioned in the previous answer.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.