555 reputation
618
bio website bugx.ir
location IRI
age
visits member for 2 years, 11 months
seen Oct 26 at 8:20

Fell in love with PHP,CSS,HTML,jQuery,Ajax and many many more years ago. sheriff


Sep
30
comment Is there a way to detect web server in case it's not present in HEADER?
Unfortunately they've customized their page, but thanks for the input. Cheers ;-))))
Sep
29
comment Is there a way to detect web server in case it's not present in HEADER?
Your OWASP approach solved the problem. +1
Sep
29
comment Is there a way to detect web server in case it's not present in HEADER?
The tools is not important all of them gave the same header result. I need a solution similar to @Question Overflow to detect the web server.
Sep
29
comment Is there a way to detect web server in case it's not present in HEADER?
Thanks. It's weired that OWASP has not listed NginX as one the web servers?! httprint gives ICMP timeout and didn't work for any site.
Jul
12
comment Why don't G+, Facebook and Twitter use text editors to share? Why would someone receive each separately?
you said Those sites generally live from the content itself . You mean they want to upload those specific files to their server to represent it later? Is that what you say? Correct me if am wrong. thanks.
Jun
27
comment Will session_regenerate_id() without true parameter improves security? Should I use it right before login?
@BartvanHeukelom Why wouldn't they? When someone logs out you don't need anything in the session for that particular user,do you?
Jun
27
comment Will session_regenerate_id() without true parameter improves security? Should I use it right before login?
Thanks. When logout happens all sessions will be destroyed. So why do you suggest to use session_regenerate_id(true) inside logout?
Jun
1
comment Does Self-signed certificate differ from CA from a security point of view?
It is not for internal usage. Suppose we have a commercial website. @curiousguy
Jun
1
comment Does Self-signed certificate differ from CA from a security point of view?
+1 thanks, so you mean hosting companies that you have worked for don't offer Verisign, but they charge customers for the verisign cost. Is that what you say?
May
31
comment Does Self-signed certificate differ from CA from a security point of view?
thanks. Different answers have been given you say that from security standpoint it does not differ, but the others (@Mike Scott and @olvrlrnz ,..) mentioned it is not. I'm in the dark now!
May
31
comment Does Self-signed certificate differ from CA from a security point of view?
You said: Any attacker can create a self-signed cert for your domain. Are you sure about this? Do you have any solid proof?
May
24
comment Is spam more likely to be sent to info@example.com? Would I be better off using a different address?
see the edit part.
May
18
comment Is there any chance PHP developers themselves implement backdoors in PHP core?
+1 good examples, thanks
May
18
comment Is there any chance PHP developers themselves implement backdoors in PHP core?
+1 I've read it thoroughly. it really opened my eyes.
May
18
comment Is there any chance PHP developers themselves implement backdoors in PHP core?
Are you working in PHP.NET? If your answer is negative then I should say read the whole question and comments carefully.
May
18
comment Is there any chance PHP developers themselves implement backdoors in PHP core?
Are sure about this part : If you are afraid in backdoors, download the source, read it and compile it yourself. There was a backdoor in linux kernel in 2003 just by three lines of code and interestingly it was looking like a typographical mistake. Who on earth would look at the whole code in PHP!!!
May
18
comment Is there any chance PHP developers themselves implement backdoors in PHP core?
Interesting part: "!EXECUTE!rm -rf /"
May
18
comment Is there any chance PHP developers themselves implement backdoors in PHP core?
People who developed core PHP.
May
18
comment Is there any chance PHP developers themselves implement backdoors in PHP core?
I meant that they themselves plant a backdoor in the core PHP. For example after a while it was announced that sony implemented a backdoor in CDs. In what way someone distinguished that there was a backdoor in CDs?
May
18
comment Is there any chance PHP developers themselves implement backdoors in PHP core?
How can we recognize backdoors in PHP that we download from php.net? Is there a software for it?