555 reputation
518
bio website bugx.ir
location IRI
age
visits member for 2 years, 10 months
seen Oct 20 at 11:45

Fell in love with PHP,CSS,HTML,jQuery,Ajax and many many more years ago. sheriff


May
18
asked Is there any chance PHP developers themselves implement backdoors in PHP core?
May
3
comment What is the disadvantages of storing user role including admin in a session variable?
You mean we can change session with JS??
May
3
comment What is the disadvantages of storing user role including admin in a session variable?
I've already implemented token in my DB and checks against it.
May
3
asked What is the disadvantages of storing user role including admin in a session variable?
Apr
30
comment When form submission fails, password field gets blanked, why is that the case?
I actually emptied the pass fields, and used client side validations. Now I'm neither worried about security nor about UX. thanks for thorough explanation of the subject.
Apr
30
accepted When form submission fails, password field gets blanked, why is that the case?
Apr
24
comment When form submission fails, password field gets blanked, why is that the case?
good point never thought about it that way.
Apr
24
comment When form submission fails, password field gets blanked, why is that the case?
well it is visible to the user itself, is there something else here I'm missing?
Apr
24
asked When form submission fails, password field gets blanked, why is that the case?
Apr
17
comment Is it a secure way to declare DB parameters in htaccess rather than in a PHP file?
+1 for your good point @Legolas, thanks
Apr
17
revised Is it a secure way to declare DB parameters in htaccess rather than in a PHP file?
added 44 characters in body
Apr
16
comment If we cast a value is it still necessary to escape it with mysqli_real_escape_string()?
makes more sense
Apr
16
accepted If we cast a value is it still necessary to escape it with mysqli_real_escape_string()?
Apr
15
accepted Is it a secure way to declare DB parameters in htaccess rather than in a PHP file?
Apr
15
comment If we cast a value is it still necessary to escape it with mysqli_real_escape_string()?
thanks for the prepared statement, It's awesome for escaping data, but the problem is performance issues in large scale databases.
Apr
15
asked If we cast a value is it still necessary to escape it with mysqli_real_escape_string()?
Apr
15
asked Is it a secure way to declare DB parameters in htaccess rather than in a PHP file?
Mar
30
awarded  Popular Question
Mar
30
accepted Is passwords with combination of different encodings super safe?
Mar
30
comment Is passwords with combination of different encodings super safe?
Well I'll try to type 16 UTF-16 characters to make brute force attack harder... (2^16)^16=???