I'm starting out so apologies if this is a stupid question.

Is it possible to access server controls (i.e. root) by hacking a website? Not just the database and web root files, but say to root the server or more importantly the network the server is connected to?

SO something like this:

me->internet website->server->local LAN

(04-17-2009 07:46 AM)cryptic Wrote:  I'm starting out so apologies if this is a stupid question.

Is it possible to access server controls (i.e. root) by hacking a website? Not just the database and web root files, but say to root the server or more importantly the network the server is connected to?

SO something like this:

me->internet website->server->local LAN

Yes and no.

Yes if the server isn't set up properly. For example, if Apache is running as root, and you hack a website, you possible have access to controlling that server.
If the server is set up "correctly" then its likely that your hacking attempt will be limited to apache web files (i.e. all your webpages ) and any programs the user Apache runs under. If you can access the website files, you should also be able to access the sql database one using name and passwords contained in those files.