meta user
network profile
| bio | website | ad7six.com |
|---|---|---|
| location | Spain | |
| age | 37 | |
| visits | member for | 1 year, 3 months |
| seen | Mar 28 at 8:23 | |
| stats | profile views | 13 |
Professional web developer.
Mostly php (CakePHP team member), some node.js, various databases/datastores - and a dash of linux (arch with a smidgen of ubuntu server).
|
Feb 28 |
awarded | Necromancer |
|
Jan 30 |
awarded | Yearling |
|
Nov 30 |
comment |
Is my session-less authentication system secure? @Earlz From your reasoning of why you want to do this, I'd say the solution is to use a different platform; if the problem is you don't like how .net works - don't use .net. "HTTP basic authentication is difficult" <- that's a bit of a red flag - http basic auth is just that - basic (it's easy to the point of trivial to implement ordinarily, not sure what complexities .net adds to that; it's also insecure to the point of useless over http://.. though) |
|
Nov 29 |
comment |
Is my session-less authentication system secure? "with otherinfo being things like IP address, browser info, etc" - that sounds like if you have the same public IP as an identified user, you only need to sniff the cookie to assume their identity. Since a session id is just a cookie anyway - why create a new way to store a session cookie. |
|
May 21 |
awarded | Fanatic |
|
Mar 12 |
awarded | Enthusiast |
|
Feb 23 |
awarded | Analytical |
|
Feb 22 |
awarded | Critic |
|
Feb 22 |
answered | Definitely safest password storage scheme? |
|
Feb 14 |
awarded | Teacher |
|
Feb 14 |
revised |
Does prepending a salt to the password instead of inserting it in the middle decrease security? add "in the middle" answer |
|
Feb 14 |
answered | Does prepending a salt to the password instead of inserting it in the middle decrease security? |
|
Feb 10 |
revised |
How can I find the process that is trying to use smtp to send email? give the link a title |
|
Feb 10 |
suggested | suggested edit on How can I find the process that is trying to use smtp to send email? |
|
Feb 9 |
awarded | Editor |
|
Feb 9 |
revised |
Cross Site Scripting Related Query | Web Application Security add emphasis |
|
Feb 9 |
comment |
Cross Site Scripting Related Query | Web Application Security I don't have a way, I'd recommend you use a framework to worry about if for you e.g. cakephp which, like probably all frameworks, provides a means of cleaning malicious markup or simply using php's filters |
|
Feb 9 |
answered | Cross Site Scripting Related Query | Web Application Security |
|
Feb 4 |
awarded | Supporter |
|
Jan 30 |
awarded | Autobiographer |
