Hi,

I use the CSF firewall on my server and after installing SS I got about twenty warning emails from it telling me that:

Time: Mon Nov 26 01:29:04 2007
File: /tmp/silverstripe-cache-home-[ACCOUNTNAME]-public_html-silver/cache.php
Reason: Script, file extension
Owner: [ACCOUNTNAME]:[ACCOUNTNAME]
Action: Moved into /etc/csf/suspicious.tar

Time: Mon Nov 26 00:13:20 2007
File: /tmp/silverstripe-cache-home-[ACCOUNTNAME]-public_html-silver/manifest_home_[ACCOUNTNAME]_public_html_silver_sapphire_main.php
Reason: Script, file extension
Owner: [ACCOUNTNAME]:[ACCOUNTNAME]
Action: Moved into /etc/csf/suspicious.tar

I installed the latest RC (downloaded direct from here) Should I be concerned?

TIA

Thanks DaveP,

I appreciate you taking the time to post a response.

I know the point of a firewall is so that I can tell it to stop bothering me, but i'm a rebel. I like it to bother me when it gets suspicious of something. If it tells me there is a suspicious file on my server, I immediately investigate the matter, hoping against hope that I have not inadvertently uploaded a malicious script of some form or other.

Being but a virgin in the *cough*art*cough* of coding, I am about as clueless about whether there is a vulnerability in the script as George Bush is on international Affairs.

For all I know the silverstripe server may have been hacked like Joomla.org was a short while ago and the latest silverstripe RC replaced with a vulnerable version.

Far fetched I know, and no, TBH I didn't for a second even imagine that had occurred. However, please don't brush aside my post by virtually saying "umm... ok n00b, didn't you realize you had to tell your firewall not to warn you about Silverstripe".

I posted it here because Jonathan's CSF (firewall) is hugely popular and many folk, n00bs like myself ;) , will wonder the same as I did. I felt the Silverstripe team might want to put a notice in the install script saying "if you have CSF, expect warnings about this but fear not, it is completely safe!".

Thank you for your time. I truly appreciate the efforts of the Silverstripe team and thought this tiny bit of feedback about my initial experience with the script might interest them. Feel free to ignore this thread

Cheers

I just went back and reread your initial post and is it possible that your firewall is set to warn on .php files ? This appears to be what is is complaining about !

Dave

Oh, Did you hate Social Studies at school ?
Dave