Topic: PHP serious security issues - Patch for 5.5?

[nsh]

I run three 5.5 boxes.  What are my options for upgrading or patching PHP 4.1.2 - rpm or upgrade path?
 
The Dan Brown script nuked my httpd (and other things) on my test box.
 
5.5 what do I do.

[BoZz]

Wish it was that easy, better upgrading to the latest contribs? I your just worried about somebody hacking your php web site via cross scripting, etc do this. Make a .htaccess file with this inside:
<filesmatch "\.php$">
deny from all
</filesmatch>

copy this fille to all your sub directory's. This only allows *.php files to be called locally