security from hackers

[Gregk]

hi...how secure is 68classifieds?, I have seen contradicting information on it, how often is the software checked by gulftech?.....I was thinking of using phprobid until I found out it has more holes in it than Swiss cheese. I've also seen a few reports that say 68classifieds is vulnerable to sql injection attacks.

So what is the actual situation regards security from hackers?..thanks.

[Gregk]

Hi again...looking at the forums there was a recent security issue and an audit by gulftech was referred to, however I see this on the gulftech site

"I will no longer be offering private code audits or conducting any public vulnerability research of any kind for the foreseeable future. This is due to certain contractual obligations that I have with my current employer. This is of course not a bad thing though, as I love my work, and all of my co workers are great people (and very talented!). Thanks for reading my advisories over the years, and thanks to all of the developers who I've worked with to help make their software more secure. If you are looking to have your web application source code audited, I highly recommend SektionEins, they're the best you will find."

So how you found anyone else to check the security of 68classifieds in the future? ......thanks

[Eric Barnes]

Hi,

We had used Gulftech for years and the last audit they performed was on v4.0.x line. The 4.1 uses a lot of the same code as it and if security issues are found we release upgrades asap.

As far as current auditing, now we are doing everything internally. I have tried contacting that other company but never heard back from them.