Thursday, April 18, 2013

Remove version number / name of extensions


Most vulnerabilities only occur in a specific release of a specific extension. Showing MyExtension version 2.14 is a really bad thing. You can modify this message to only the name of the extension by doing the following:

1. Retrieve all files of the extension from your server. 

2. Open up Dreamweaver.

3. Load any file from the extension that you just downloaded to your local machine.

4. Use the Search function and set the search to Search through specified folder. Navigate to the folder where you downloaded the exploit to.

5. Set the search term to "MyExtension version 2.14" and press OK.

6. When found the correct file, remove the version number.

7. Upload the changed file to your server and check if the changes are made.

No comments:

Post a Comment