426 reputation
515
bio website bugx.ir
location IRI
age
visits member for 2 years, 8 months
seen May 13 at 7:54

Fell in love with PHP,CSS,HTML,jQuery,Ajax and many many more years ago. sheriff


May
18
comment Is there any chance PHP developers themselves implement backdoors in PHP core?
+1 I've read it thoroughly. it really opened my eyes.
May
18
comment Is there any chance PHP developers themselves implement backdoors in PHP core?
Are you working in PHP.NET? If your answer is negative then I should say read the whole question and comments carefully.
May
18
comment Is there any chance PHP developers themselves implement backdoors in PHP core?
Are sure about this part : If you are afraid in backdoors, download the source, read it and compile it yourself. There was a backdoor in linux kernel in 2003 just by three lines of code and interestingly it was looking like a typographical mistake. Who on earth would look at the whole code in PHP!!!
May
18
comment Is there any chance PHP developers themselves implement backdoors in PHP core?
Interesting part: "!EXECUTE!rm -rf /"
May
18
comment Is there any chance PHP developers themselves implement backdoors in PHP core?
People who developed core PHP.
May
18
revised Is there any chance PHP developers themselves implement backdoors in PHP core?
edited title
May
18
comment Is there any chance PHP developers themselves implement backdoors in PHP core?
I meant that they themselves plant a backdoor in the core PHP. For example after a while it was announced that sony implemented a backdoor in CDs. In what way someone distinguished that there was a backdoor in CDs?
May
18
accepted Is there any chance PHP developers themselves implement backdoors in PHP core?
May
18
comment Is there any chance PHP developers themselves implement backdoors in PHP core?
How can we recognize backdoors in PHP that we download from php.net? Is there a software for it?
May
18
asked Is there any chance PHP developers themselves implement backdoors in PHP core?
May
3
comment What is the disadvantages of storing user role including admin in a session variable?
You mean we can change session with JS??
May
3
comment What is the disadvantages of storing user role including admin in a session variable?
I've already implemented token in my DB and checks against it.
May
3
asked What is the disadvantages of storing user role including admin in a session variable?
Apr
30
comment When form submission fails, password field gets blanked, why is that the case?
I actually emptied the pass fields, and used client side validations. Now I'm neither worried about security nor about UX. thanks for thorough explanation of the subject.
Apr
30
accepted When form submission fails, password field gets blanked, why is that the case?
Apr
24
comment When form submission fails, password field gets blanked, why is that the case?
good point never thought about it that way.
Apr
24
comment When form submission fails, password field gets blanked, why is that the case?
well it is visible to the user itself, is there something else here I'm missing?
Apr
24
asked When form submission fails, password field gets blanked, why is that the case?
Apr
17
comment Is it a secure way to declare DB parameters in htaccess rather than in a PHP file?
+1 for your good point @Legolas, thanks
Apr
17
revised Is it a secure way to declare DB parameters in htaccess rather than in a PHP file?
added 44 characters in body