421 reputation
512
bio website bugx.ir
location IRI
age
visits member for 2 years, 4 months
seen Apr 14 at 13:08

Fell in love with PHP,CSS,HTML,jQuery,Ajax and many many more years ago. sheriff


Jul
12
comment Why don't G+, Facebook and Twitter use text editors to share? Why would someone receive each separately?
you said Those sites generally live from the content itself . You mean they want to upload those specific files to their server to represent it later? Is that what you say? Correct me if am wrong. thanks.
Jun
27
comment Will session_regenerate_id() without true parameter improves security? Should I use it right before login?
@BartvanHeukelom Why wouldn't they? When someone logs out you don't need anything in the session for that particular user,do you?
Jun
27
comment Will session_regenerate_id() without true parameter improves security? Should I use it right before login?
Thanks. When logout happens all sessions will be destroyed. So why do you suggest to use session_regenerate_id(true) inside logout?
Jun
1
comment Does Self-signed certificate differ from CA from a security point of view?
It is not for internal usage. Suppose we have a commercial website. @curiousguy
Jun
1
comment Does Self-signed certificate differ from CA from a security point of view?
+1 thanks, so you mean hosting companies that you have worked for don't offer Verisign, but they charge customers for the verisign cost. Is that what you say?
May
31
comment Does Self-signed certificate differ from CA from a security point of view?
thanks. Different answers have been given you say that from security standpoint it does not differ, but the others (@Mike Scott and @olvrlrnz ,..) mentioned it is not. I'm in the dark now!
May
31
comment Does Self-signed certificate differ from CA from a security point of view?
You said: Any attacker can create a self-signed cert for your domain. Are you sure about this? Do you have any solid proof?
May
24
comment Is spam more likely to be sent to info@example.com? Would I be better off using a different address?
see the edit part.
May
18
comment Is there any chance PHP developers themselves implement backdoors in PHP core?
+1 good examples, thanks
May
18
comment Is there any chance PHP developers themselves implement backdoors in PHP core?
+1 I've read it thoroughly. it really opened my eyes.
May
18
comment Is there any chance PHP developers themselves implement backdoors in PHP core?
Are you working in PHP.NET? If your answer is negative then I should say read the whole question and comments carefully.
May
18
comment Is there any chance PHP developers themselves implement backdoors in PHP core?
Are sure about this part : If you are afraid in backdoors, download the source, read it and compile it yourself. There was a backdoor in linux kernel in 2003 just by three lines of code and interestingly it was looking like a typographical mistake. Who on earth would look at the whole code in PHP!!!
May
18
comment Is there any chance PHP developers themselves implement backdoors in PHP core?
Interesting part: "!EXECUTE!rm -rf /"
May
18
comment Is there any chance PHP developers themselves implement backdoors in PHP core?
People who developed core PHP.
May
18
comment Is there any chance PHP developers themselves implement backdoors in PHP core?
I meant that they themselves plant a backdoor in the core PHP. For example after a while it was announced that sony implemented a backdoor in CDs. In what way someone distinguished that there was a backdoor in CDs?
May
18
comment Is there any chance PHP developers themselves implement backdoors in PHP core?
How can we recognize backdoors in PHP that we download from php.net? Is there a software for it?
May
3
comment What is the disadvantages of storing user role including admin in a session variable?
You mean we can change session with JS??
May
3
comment What is the disadvantages of storing user role including admin in a session variable?
I've already implemented token in my DB and checks against it.
Apr
30
comment When form submission fails, password field gets blanked, why is that the case?
I actually emptied the pass fields, and used client side validations. Now I'm neither worried about security nor about UX. thanks for thorough explanation of the subject.
Apr
24
comment When form submission fails, password field gets blanked, why is that the case?
good point never thought about it that way.