Filip Haglund

264 reputation

bio	website
	location	Sweden
	age	18
visits	member for	1 year, 10 months
	seen	May 19 at 16:47
stats	profile views	29

	264 reputation	bio	website		visits	member for	1 year, 10 months
17 badges		location	Sweden		seen	May 19 at 16:47

summary answers questions tags badges favorites bounties reputation activity

56 Actions

suggestions reviews revisions comments badges posts accepts all

Apr 9	accepted	Mark parts of strings as unsafe?
Apr 9	comment	Mark parts of strings as unsafe? I'll just mark this as the answer. It isn't really what I was looking for, but it's definitely the best advice to most other people looking at this question.
Apr 7	comment	Mark parts of strings as unsafe? I am using prepared statements, but I want to validate the input in other ways as well. It's also now always easy to know what has been validated and what hasn't. The latter is mostly caused by bad code, but not always.
Apr 7	comment	Mark parts of strings as unsafe? @CodesInChaos Could you please explain why it's fundamentally flawed so I don't ever have to try this again?
Apr 7	asked	Mark parts of strings as unsafe?
Feb 22	awarded	Popular Question
Jan 30	comment	SQLi-protection ORDER BY Could you give an example of your 2nd option?
Jan 30	revised	SQLi-protection ORDER BY Added some clarification to the question.
Jan 30	asked	SQLi-protection ORDER BY
Jan 28	awarded	Yearling
Dec 16	awarded	Popular Question
May 4	accepted	Cutting and sniffing fiberoptic cables - time before detection?
May 2	asked	Cutting and sniffing fiberoptic cables - time before detection?
Nov 18	comment	What is the best way of securing a website logon without SSL or preshared keys? It's broken because authorities give out certs to 192.168.x.x, and multiple certs to google.com for example. The cert authorities broke SSL.
Nov 16	revised	What is the best way of securing a website logon without SSL or preshared keys? added 149 characters in body
Nov 16	comment	What is the best way of securing a website logon without SSL or preshared keys? Sound pretty good, but how would it be possible to defend against MitM fully?
Nov 16	comment	What is the best way of securing a website logon without SSL or preshared keys? True story! Didn't think about the fact that the js is sent to the browser. I don't want to convince our school since the server is our (my) private playground atm. (nobody else uses it anymore) I don't have any big application to worry about either.
Nov 16	comment	What is the best way of securing a website logon without SSL or preshared keys? The server is free for me, and I don't like SSL.
Nov 16	comment	What is the best way of securing a website logon without SSL or preshared keys? I don't like SSL - it's broken, and I don't own the server so i can't turn it on anyway.
Nov 16	comment	What is the best way of securing a website logon without SSL or preshared keys? I do not own the server, and it's just for fun right now. Threat model contains everything imaginable. Of course it will have problems. Let's find them!