Tag Info

New answers tagged

4

From the iOS 7 Deployment Technical Reference document (opens a PDF): Certificate validation The first time a user opens an app, the distribution certificate is validated by contacting Apple’s OCSP server. Unless the certificate has been revoked, the app is allowed to run. Inability to contact or get a response from the OCSP server isn’t ...


2

No, you are missing something. SQL injection can be done on any field that a user can possibly alter. This not only includes your username and your password field, but also any hidden fields that may be stored on the website and passed in to the server (as the user can alter their webpage contents). If the value is coming from the user's computer in any ...


1

First off, you should not be rolling your own SQL Injection filter. The idea of doing this has been covered at length in the security community and the consensus is that it is almost never a good idea. My question is all we actually have to filter is the input the user/attacker tries to input in the userID field right? Not really (but maybe). Why ...


0

Not sure if i understood it correctly but here is what i think. As long as you are using parameterized queries you should be safe in your case. Avoid relying solely on filters as these can be bypassed. But if you are going to use filters, special character you are allowing will cause filtering limitations as well. In such your case You can filter usernames ...



Top 50 recent answers are included