421 reputation
512
bio website bugx.ir
location IRI
age
visits member for 2 years, 4 months
seen Apr 14 at 13:08

Fell in love with PHP,CSS,HTML,jQuery,Ajax and many many more years ago. sheriff


Apr
15
comment If we cast a value is it still necessary to escape it with mysqli_real_escape_string()?
thanks for the prepared statement, It's awesome for escaping data, but the problem is performance issues in large scale databases.
Apr
15
asked If we cast a value is it still necessary to escape it with mysqli_real_escape_string()?
Apr
15
asked Is it a secure way to declare DB parameters in htaccess rather than in a PHP file?
Mar
30
awarded  Popular Question
Mar
30
accepted Is passwords with combination of different encodings super safe?
Mar
30
comment Is passwords with combination of different encodings super safe?
Well I'll try to type 16 UTF-16 characters to make brute force attack harder... (2^16)^16=???
Mar
30
comment Is passwords with combination of different encodings super safe?
good point by referring to encoding in mobile devices. tnx to all.
Mar
30
asked Is passwords with combination of different encodings super safe?
Feb
6
awarded  Nice Question
Feb
3
awarded  Critic
Jan
14
awarded  Commentator
Jan
14
comment PHP Vulnerability May Halt Millions of Servers - max_input_vars!
In the last part I didn't mean data modification by an attacker, I mean I myself change the setting in my project to prevent from DoS attacks, assume my server has been upgraded, but the default is 1000 and I can change max_input_vars, you're upvoted thanks.
Jan
13
asked PHP Vulnerability May Halt Millions of Servers - max_input_vars!
Jan
6
revised Why do I get “Cannot find bound of current function” when I overwrite the ret address of a vulnerable program?
grammar wa incorrect
Jan
6
suggested suggested edit on Why do I get “Cannot find bound of current function” when I overwrite the ret address of a vulnerable program?
Dec
31
revised what is the best keylogger for security uses?
`the` before best in the title
Dec
31
suggested suggested edit on what is the best keylogger for security uses?
Dec
30
comment Does this htaccess snippet provide sufficient security?
well, that's not all @bobince. this is just part of my web app. I've done different kinds of XSS attack control. securing uploaded files by converting them to jpg to strip vulnerable headers, renaming them and many many more, but I know it's not enough and I want to hear more about security.
Dec
30
comment Does this htaccess snippet provide sufficient security?
Inside our web app every user has a wallet to store his money, every user can comment on the site, and they can of course participate in our online quizzes. they can upload their avatars. If somebody finds a loop hole to my DB, then everything would fall apart! @RoryAlsop
Dec
30
revised Does this htaccess snippet provide sufficient security?
deleted 11 characters in body