555 reputation
618
bio website bugx.ir
location IRI
age
visits member for 2 years, 11 months
seen Oct 26 at 8:20

Fell in love with PHP,CSS,HTML,jQuery,Ajax and many many more years ago. sheriff


Mar
30
comment Is passwords with combination of different encodings super safe?
Well I'll try to type 16 UTF-16 characters to make brute force attack harder... (2^16)^16=???
Mar
30
comment Is passwords with combination of different encodings super safe?
good point by referring to encoding in mobile devices. tnx to all.
Mar
30
asked Is passwords with combination of different encodings super safe?
Feb
6
awarded  Nice Question
Feb
3
awarded  Critic
Jan
14
awarded  Commentator
Jan
14
comment PHP Vulnerability May Halt Millions of Servers - max_input_vars!
In the last part I didn't mean data modification by an attacker, I mean I myself change the setting in my project to prevent from DoS attacks, assume my server has been upgraded, but the default is 1000 and I can change max_input_vars, you're upvoted thanks.
Jan
13
asked PHP Vulnerability May Halt Millions of Servers - max_input_vars!
Jan
6
revised Why do I get “Cannot find bound of current function” when I overwrite the ret address of a vulnerable program?
grammar wa incorrect
Jan
6
suggested suggested edit on Why do I get “Cannot find bound of current function” when I overwrite the ret address of a vulnerable program?
Dec
31
revised what is the best keylogger for security uses?
`the` before best in the title
Dec
31
suggested suggested edit on what is the best keylogger for security uses?
Dec
30
comment Does this htaccess snippet provide sufficient security?
well, that's not all @bobince. this is just part of my web app. I've done different kinds of XSS attack control. securing uploaded files by converting them to jpg to strip vulnerable headers, renaming them and many many more, but I know it's not enough and I want to hear more about security.
Dec
30
comment Does this htaccess snippet provide sufficient security?
Inside our web app every user has a wallet to store his money, every user can comment on the site, and they can of course participate in our online quizzes. they can upload their avatars. If somebody finds a loop hole to my DB, then everything would fall apart! @RoryAlsop
Dec
30
revised Does this htaccess snippet provide sufficient security?
deleted 11 characters in body
Dec
29
asked Does this htaccess snippet provide sufficient security?
Dec
27
comment users avatar names based on Primary Key, is it safe?
My app does not fall over. I took good care of that. tnx @bobince
Dec
27
asked users avatar names based on Primary Key, is it safe?
Dec
27
comment How would you analyze an image to find out if there are scripts embedded in it?
nice question, I hope someone answer that. how to implement it in PHP...
Dec
27
accepted Why don't we use MAC address instead of IP address?