27 Nov
2009
27 Nov
'09
7:36 p.m.
Bob McConnell wrote:
I'll go one further. We run commercial web sites on CentOS 5.3 which must also be PCI compliant. Because of the security issues, the auditors have been complaining for two months that we don't have PHP 5.2.11 installed yet, putting our PCI certification in jeopardy. When 5.2.12 is released, probably next month, we will have 30 days to get it installed.
If thats their requirement, then perhaps RHEL and its derivatives aren't the right platform for this. Or, you shouldn't be using PHP at all.