|
|
|
|
Login to share your opinion Top Cloud Security Threats and Countershe Cloud Security Alliance has released their first condensed report on cloud computing security risks. The list of warnings is intended as a companion to… read more How to avoid Identity Theft in Zend Framework with Zend AuthAs I am building my applications, I always try to improve the code I write in some way. Today I thought about the security issues… read more Just Hashing is Far from Enough – How to Position against Dictionary and Rainbow Table AttacksThanks to unprecedentedly cheap computing power now, rainbow tables, the mapping function from hash strings to any possible combinations of keyboard characters (alphanumeric, punctuations, etc.)… read more The IP Address – Identity DisconnectI could quote The Prisoner, but that would be so cliché, wouldn’t it? Instead, let me ask a question: just which IP address am I?… read more PHP secure loginFirst you load login-form.php at this point session variable $_SESSION['rand'] is formed. After entering username and password you are taken to secure-page.php. read more Free WebApp Security Testing ToolsA lot of tweets today informed me about launch of Damn Vulnerable Web App (DVWA) which is basically an aid for security professionals to test… read more Month of PHP Security 2010Three years ago, the Hardened-PHP project (also known for the Suhosin security patch) organized the Month of PHP bugs. During March 2007 more than 40… read more Month of PHP Security 2010 - CALL FOR PAPERSI previously blogged a sneak preview of the Month of PHP Security which is a new initiative to improve security in the PHP ecosystem. Today… read more Debian breaks Suhosin Security Featuretwo days ago I finally installed a mail client on my reinstalled desktop system and checked mails of the hardened-php account that were not checked… read more A Big Case of ...OOPS...I was in auto-pilot, I was standing in front of a group of people - some [most] of whom couldn't care less about their company's… read more Stability, security-focused PHP 5.2.13 released todayPHP 5.2.13 was released today, fixing over 40 bugs. PHP recommends that all users on the 5.2 branch upgrade as soon as possible. Included below… read more How to Write a PHP Script to Run Shell Commands from BrowserIt happens pretty often for me to have to run shell commands in a hosting environment. I do it all the time via a simple… read more Writing secure codes in PHPIts always good to believe that there are n number of ways to mess up with your application. This is not just applicable for PHP… read more The Horrors of C99.phpIf you were a sysadmin a few years ago, and you had php on your servers, you’re probably already familiar with c99. In case you… read more Sneak Preview: Month of PHP Security 2010During one month I disclosed more than 40 vulnerabilities in the PHP interpreter in order to improve the overall security of PHP. In the history… read more Vital MySQL Development Security TipsWhen you’re developing applications or a website using MySQL, there are a few tips you can follow to enhance the security of your database. When… read more Preventing CSRF in PHPCross site request forgery (CSRF) is where a malicious website will attempt to issue actions on another website without the user’s knowledge of it occuring. read more Basic PHP Security Test ToolSee what free, easy to use tool you can use to test your PHP installation. It'll tell what changes you need to make to your… read more 10 Effective Ways To Secure Your WordPress BlogHere are 10 great ways to improve the security of your WordPress powered website. read more A Few More Wordpress Security PluginsWe covered Wordpress security a few months ago here at WebM.ag and the article proved to be well received, so much so we have had… read more |
|