1,020 reputation
29
bio website
location Poland
age
visits member for 2 years, 1 month
seen Jan 23 at 15:43

Jun
6
awarded  Yearling
Nov
11
answered PHP null byte include failing explation seeked
Oct
20
answered SQL injection with “INSERT” statement
Aug
19
answered What are the benefits and drawbacks of emailing a user a login token/link?
Jul
18
awarded  Talkative
Jun
6
awarded  Yearling
May
8
awarded  Commentator
May
8
comment Is it possible for a hacker to download a php file without executing it first?
I guess, that instead of LFI you mean AFD (Arbitrary File Download).
May
8
answered Does escaping quotes protect me from SQL injection?
Mar
18
awarded  Nice Answer
Oct
13
revised Is a password easier to brute force if it contains a repeating pattern?
edited body
Oct
13
answered Is a password easier to brute force if it contains a repeating pattern?
Aug
18
answered How to pentest Flash file on webapp with alowscriptaccess=samedomain?
Aug
15
answered CAPTCHA or email confirmation?
Aug
15
answered Should I block visitors who seem to be probing my site?
Aug
15
awarded  Caucus
Aug
15
answered Is it secure to use jQuery on the server-side for user input validation?
Jul
17
comment Can web application do anything to prevent risk from client-side malware?
@curiousguy - You are clearly saying that this method "reduces the risk" - 'cos it does. This method prevents keyloggers from stealing your typed password. So in this area the risk is decreased. However it could be increased in the other areas (mentioned in the comments above). It's up to organisation, which risk they want to take and which problems are more important for them. If I got a lot of calls from my users, that they password had beed stolen by keyloggers, I would implement this method.
Jul
14
comment Why Disallow Special Characters In a Password?
Shouldn't be there any regulations when this institutions want to collect any personal data? AFAIK, not everyone could process personal data, you need to have permission for that and follow regulations, when you want to process them (or maybe it depends on country).
Jul
13
answered Why Disallow Special Characters In a Password?