Security aspects concerning code written in the programming language PHP which is often used for web applications.
1
vote
2answers
175 views
how to bypass “header” in php
While reading an article I encounter an interesting thing I did not know about:
if(!isset($_SESSION['usr_id']) || !isset($_SESSION['usr_name']))
{
header('Location: index.php');
}
...Which ...
1
vote
2answers
254 views
What vulnerabilities in the OWASP Top 10 are relevant to WordPress?
I have been looking at the OWASP Top 10, and am wondering which of the top 10 security risks are relevant to a WordPress installation with various plugins installed?
I know injections and XSS are ...
1
vote
3answers
500 views
list of web session attacks and counter measures
I'm writing a new website with php and I will be using cookies to track user session data. Before I finalise the design I want to make sure that the site is not vulnerable to attacks. I have written a ...
1
vote
2answers
126 views
How to stop a (malicious) endless loop
Few days ago someone tried to crack my site using a Remote File Inclusion attack.
The attack was blocked by my Web Application Firewall, but I was curious about the file.
So I downloaded it started to ...
1
vote
2answers
126 views
how to find injected code in SQL
Recently one of my sites is hacked. The hacker used SQL injection to compromise the security. After getting SQL access he injected code in many places in database. I cleaned up many of them. But I am ...
1
vote
1answer
97 views
Is it secure to use a custom written Php extension for handling + hashing (db) keys?
I'm designing the security of a new application and try to figure out what the best way is to store the keys of the mysql AES encryption in the file system. I've seen several options like store it ...
1
vote
1answer
503 views
Stopping Session Hijacking
If you noticed, I put "stopping" instead "preventing" in the title because I want my PHP application to be as secure as possible. I am wondering if anyone has any better ways to prevent session ...
1
vote
2answers
58 views
Remote File Injection in ARGS blocking form updating database
I am getting a page forbidden because mod_security blocks it with Remote File Injection in ARGS rule.
How do I stop this apart from not including URLs in the form fields or removing the http:// ...
1
vote
1answer
83 views
XSS MySQL Database Accessible?
I'd like to know if there is any danger of someone being able to access the database via XSS vulnerabilities on this page.
I have the following link. When you go to this link, the text I've enclosed ...
1
vote
1answer
384 views
aes cfb 128 decryption /encryption problem between Erlang and PHP
Update 2 - it works
Thanks to Tom Leek for his answer.
The CFB mode of mycrypt for Rijndael uses a 8-bit feedback loop and not a feedback loop the length of the key/iv.
You have to force it to use ...
1
vote
1answer
126 views
Are there modules to harden Symfony 2 sessions?
We're looking at building a new app on top of Symfony 2, but security is our top priority. After digging around a bit, it seems that there are a number of built-in options for Session management (eg ...
1
vote
1answer
189 views
I've heard that salt is not meant to be secret, but what if I made it secret? [duplicate]
Possible Duplicate:
Password Hashing add salt + pepper or is salt enough?
How to store salt?
Ok I have been studying a lot about password hashing lately. And I have a few questions. So I ...
1
vote
1answer
243 views
Implementing SRP Challenge login system *with SSL* (Using PHP)
My question: Anyone knows how to implement SRP / Diffie-Hellman authentication in PHP (or if this has already been done)?
(Some details)
I'm using CodeIgniter with TankAuth (both latest version)
...
1
vote
1answer
225 views
Information on the phpMyAdmin probe?
Various IP addresses call various domains looking for various paths that might lead to PHP My Admin/scripts/setup.php
One of those IP addresses is 74.63.212.48 which I just now found out I could ...
1
vote
0answers
73 views
Two-way authentication with google authentication app [migrated]
Can someone guide me on what I've done wrong with implementing Google authentication app?
Here is what I've tried without success:
1# Create secret key
$chars = ...
1
vote
1answer
127 views
Is it possibel to inject php code to roundcube errors log file via LFI vulnerability? [closed]
i tried to inject php code to roundcube errors log file, with no success. i think there is something filtering injected php code.
1
vote
0answers
303 views
A proposal for Data Transmission and Password Encryption [closed]
I need to implement a sensitive data protection scheme which can meet the requirements on secure data transmission, protection and storage, assuming mutually trusted third party is not available, that ...
1
vote
0answers
174 views
How anonymous used UTF-16 ASCII to fool PHP escaping [duplicate]
Possible Duplicate:
How anonymous used UTF-16 ASCII to fool PHP escaping
(Reposted here as per request). A few months ago, anonymous took down a child pornography site using SQL-injection. ...
1
vote
1answer
576 views
How can log poisoning be successful with a Local File Inclusion attack?
I just read a paper about Local File Inclusion on exploit-db.com, it can be found here. One technique with LFI is log poisoning as you may know already. You do an HTTP GET request that contains PHP ...
1
vote
2answers
171 views
TCrypto - Comments about design decisions I made?
I have pushed some code to GitHub to demonstrate the usage of symmetric key encryption in PHP. It is a small key-value storage library and it (optionally) offers ability to encrypt the stored ...
0
votes
3answers
110 views
Maintain sensitive key between requests
EDIT: Reworked question. Previous version too poorly asked.
On my website users write sensitive messages that must be kept secret.
The entire user area is over SSL, so the communication between user ...
0
votes
3answers
409 views
Viewing the configuration.php
My understanding is that you should never host your configuration.php file within the public_html directory (I am specifically referring to Joomla, but I imagine this is a cross-platform scenario).
...
0
votes
2answers
189 views
CMS security issues
I have a desire to make my own CMS , to improve my programming skills. I would use PHP as a server side programming language.
So my question is, on what security issues I must pay attention when ...
0
votes
2answers
399 views
Running Apache as system service on Windows 2003 R2 64-bit
Trying to make my point, that running Apache with PHP5 module as Windows service is not secure.
All I got to prove it - FTP access to some internal website.
So what I did - I uploaded file test.php ...
0
votes
2answers
172 views
Is this code vulnerable?
I have developed a php code given below. I would like to know what are the security vulnerabilities present within this php code?
<?php
if(isset($_SESSION['id'])){
// get data ...
0
votes
1answer
142 views
Malicious PHP code can run in cache. Solution?
I have a module that I cache some details (w/c is from the input of the user) to lessen the load of my database
The way how I cache is by creating html page with the details of the user using ...
0
votes
1answer
348 views
ASP.net vs PHP security? [closed]
I have been told that generally speaking, asp.net web apps tend to be more secure than php, since asp.net has some automatic security measures, for example, by default it doesn't allow remote file ...
0
votes
1answer
99 views
Comparison between Data Encryption Tools and Data Sanitization Tools [closed]
What are the famous Data Sanitization Tools for languages such as ASP/PHP/Html Web Sites?
Which Data Sanitization tools have the best results?
Difference between Data encryption and Data ...
0
votes
1answer
114 views
Stopping js malware injection on our Wordpress site
This had been added to our wordpress site, specifically in the footer.php.
hxxp://pkktjuchlrv.peguards.cc/02b31ac5iq/get.js
It is malware as defined by google, i belive it is tracking code.
We have ...
0
votes
2answers
76 views
What is the best way to generate keys in phpseclib?
I am using phpseclib implementation AES and HMAC. But I dont know the best way to create random keys for these.
What is the best way to do?
Is there any built in function in phpseclib to create keys ...
0
votes
2answers
179 views
How to restrict web access to certain countries
What are the better ways of filtering access to the web application based on Geographical location. Is it possible with a network layer firewall or we need an application layer?
0
votes
1answer
271 views
Is it possible to spoof the last proxy of an X-Forwarded-For Header?
I'm using a firefox plugin https://addons.mozilla.org/en-US/firefox/addon/x-forwarded-for-header/ to spoof the X-Forwarded-For Header to 8.8.8.8.
For the following php page:
echo ...
0
votes
1answer
165 views
Protect database resources from fake data inputs via web forms
Scenario:
I'm working on a project that needs to accept large amounts of data (customer data) from its users. So it can be normal to have a user trying to add 10,000 or 100,000 records at a time. In ...
0
votes
1answer
226 views
Proxy / VPN Quality Check / Detection
Is there any way to build a script which detects or rates proxies like Maxmind's proxy detection software?
I have already tried to use this code, but it doesn't detect all proxies, in fact it detect ...
0
votes
1answer
60 views
Getting hmac_sha to work between Erlang and PHP
I am trying to get an implementation based on the AWS signed http request API to work between Erlang and PHP. But I can't get it to work.
The core approach is that you constructed a canonical version ...
0
votes
1answer
222 views
How can I do steganography with an audio file in PHP? [closed]
I have expertise in PHP and I am trying to use steganography to encode a string in to an audio file that I upload. I couldn't find any good helping material on PHP manual. Any help would be ...
0
votes
0answers
61 views
Can I extend the validity of a nonce-code? [closed]
I made a URL Shortener on the admin interface of my website. The provider of the Shortener (YOURLS) secured the admin page with a security token, a nonce with 10 to 12 characters. I copied the whole ...
-1
votes
3answers
207 views
Unable to secure my site [closed]
I am php developer. I have enabled Captcha and CSRF tokens but still some one is inserting random values in my database. Please give me an idea about how anyone can insert junk values in my database ...
-1
votes
1answer
57 views
Security comparisons between two approaches: how to distinguish FUD from Substance? [closed]
Background:
WorkerB and Tymac were discussing the pros-and-cons of using two different alternatives for extending a web content management system that is used in their company.
Alternative one ...
-1
votes
1answer
62 views
setting up website for logged in users, anyone, and files no one should see (via the web) [closed]
I asked how to prevent not logged in users from seeing certain content but the solution I chose to implement encountered a problem. I chose to make my root directory for the server C:\WAMP\www\public ...
-1
votes
1answer
1k views
How to hack linux from phpMyAdmin? [closed]
I got the username and the password for phpMyAdmin, and i am trying to hack the operating system "linux". i tried to create an payload.php file which is a pyaload taken form metasploit.
i encoded the ...
-1
votes
1answer
105 views
How Do Spammers Exploit Mailto Fields?
I was interested in finding out how spammers can target my Mailto link to send out spams.
mailto:foo@domain.com?subject=foo
Is it just a case of appending
?from=foo?to=victim1;victim2;victim3
to ...
-1
votes
2answers
606 views
How to filter POST requests before they reach PHP on Apache?
I have done URL filtering with .htaccess (using learning and generator), however I am still concerned that any POST request can be submitted to the PHP even there is only one POST form on the website, ...
-2
votes
6answers
736 views
Use PHP to check uploaded image file for malware?
I want my users to be able to upload a photo. Currently I am not checking the uploaded photo for problems of any kind, although I do limit the size to 32k.
Is there any way for me to check uploaded ...
-2
votes
1answer
374 views
Changing user account passwords from PHP script - vulnerabilities? [closed]
I started a thread a while back asking for suggestions on a good (good=fairly secure) way to allow users to change their account passwords via a PHP script. (WHY? because on this particular server, I ...
-2
votes
1answer
374 views
Admin area in my php website is vulnerable to sql injection without login [closed]
my website admin area is vulnerable to sql injection . I tried using havji and it hacked successfully to database. But how is this possible. without login it breaked into admin panel.
...
-2
votes
1answer
97 views
Encode my php script [ Help ] [closed]
I wanna encode my php script .
<?php
echo "Hello world"
?>
1) base 64 method is so simple.
2) eval gzinflate base64_decode is also unlike.
3) Byterun is also simple .
I wanna make double ...
-3
votes
0answers
92 views
Decrypt my cookie [closed]
Would anybody -with the right experience- point me to the encryption, encoding, hash this number: ah0nr6721epbph2tts2i0bttd2 is stored as -if it is at all. It's a PHP session cookie.
-4
votes
0answers
49 views
Prevent Malware attack on my site [closed]
I built a wordpress site for a client. After some days, client reported that the site has been blocked by Google for Malware content. When I reviewed the site, I found some changes in the code like ...
-5
votes
2answers
231 views
PHP injection on 777 file [closed]
Some one has modified a PHP file, which had permissions set to 777, on my VPS server.
How can someone do that without administrative access to the server?
What information I can give you?
I know ...
