<div>
<div class="content wysiwyg-content">
I will be in a college hacker party and my team will have to protect a web site developed in PHP and mySQL. The challenge is to protect the site against SQL Injection and all other sort of attacks. <br />
We´ll use Windows 2008, PHP 5 and mySQL. I don´t know if it´s better to use IIS or Apache because performance will not be a problem, just the security. I think use Apache in Windows could be a natural protection because the other teams will think that we´ll use IIS and try to attack some IIS vulnerability. <br />
How is the best way (In SQL Injection we have a lot of tips to prevent) to protect this server ? We must use the college computers that will be clean on start of the challenge and we need to install and set up all the prograns (except PHP and mySQL) by ourself.<br />
<br />
Regards,<br />
<br />
JrT
</div>
</div>


I will be in a college hacker party and my team will have to protect a web site developed in PHP and mySQL. The challenge is to protect the site against SQL Injection and all other sort of attacks. 
We´ll use Windows 2008, PHP 5 and mySQL. I don´t know if it´s better to use IIS or Apache because performance will not be a problem, just the security. I think use Apache in Windows could be a natural protection because the other teams will think that we´ll use IIS and try to attack some IIS vulnerability. 
How is the best way (In SQL Injection we have a lot of tips to prevent) to protect this server ? We must use the college computers that will be clean on start of the challenge and we need to install and set up all the prograns (except PHP and mySQL) by ourself.

Regards,

JrT

Protecting a Win2008 with PHP and MySQL from crackers attack

Windows Server 2008 and Windows Server 2008 R2, based on the Microsoft Vista codebase, is the last 32-bit server operating system released by Microsoft. It has a number of versions, including including Foundation, Standard, Enterprise, Datacenter, Web, HPC Server, Itanium and Storage; new features included server core installation and Hyper-V.

Windows Server 2008

IIS is Internet Information Services, the web server included with Windows Server operating systems. All current versions are built on a modular architecture; modules can be added or removed individually so that those required for specific functionality are installed. The full installation of IIS includes HTTP, security, content, compression, caching, logging and diagnostics.

Microsoft IIS Web Server

Software firewalls, also known as host-based firewalls, provide a layer of software on one host that controls network traffic in and out of that single machine. Most operating systems now include firewall software, but many available software firewalls include central distribution, antivirus systems and disaster recovery.