¡@
php Programming Glossary: attackerhttp://stackoverflow.com/questions/11061355/security-threats-with-uploads or anything access the file arbitrarily. For example if an attacker uploads a malicious.php file to your server and you're storing..
SQL injections in ADOdb and general website security http://stackoverflow.com/questions/11939226/sql-injections-in-adodb-and-general-website-security and one time is enough for a skilled attacker Therefore you may want to use the modern PDO with prepared statements..
Reference - frequently asked questions about PDO [closed] http://stackoverflow.com/questions/15990857/reference-frequently-asked-questions-about-pdo may reveal some sensitive information to a potential attacker yet confuse a honest visitor. A custom exception handler could..
How do you use bcrypt for hashing passwords in PHP? http://stackoverflow.com/questions/4795385/how-do-you-use-bcrypt-for-hashing-passwords-in-php rounds . Its slowness and multiple rounds ensures that an attacker must deploy massive funds and hardware to be able to crack your..
PHP Session Fixation / Hijacking http://stackoverflow.com/questions/5081025/php-session-fixation-hijacking is handled differently. Session Fixation This is where an attacker explicitly sets the session identifier of a session for a user... www.example.com index... session_name sessionid . Once the attacker gives the url to the client the attack is the same as a session.. the session etc... Session Hijacking This is where an attacker gets a hold of a session identifier and is able to send requests..
PHP 2-way encryption: I need to store passwords that can be retrieved http://stackoverflow.com/questions/5089841/php-2-way-encryption-i-need-to-store-passwords-that-can-be-retrieved XSS remote inclusion etc . If it gets out the attacker can eventually crack the encryption no encryption is 100 un..
Stop people uploading malicious PHP files via forms http://stackoverflow.com/questions/602539/stop-people-uploading-malicious-php-files-via-forms
What is the best way to stop people hacking the PHP-based highscore table of a Flash game http://stackoverflow.com/questions/73947/what-is-the-best-way-to-stop-people-hacking-the-php-based-highscore-table-of-a-f You're SOL. There is nothing you can do to prevent an attacker from forging high scores Flash is even easier to reverse engineer.. token back to the server with the high score save. But an attacker can still just launch the game again get a token and then immediately.. produce random likely very high high scores . So now the attacker decompiles your Flash code and quickly finds the AES code which..
|