Timeline for PHP web application security [closed]
Current License: CC BY-SA 3.0
15 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Jul 24, 2013 at 9:56 | vote | accept | DaGhostman Dimitrov | ||
| Jul 23, 2013 at 14:31 | history | closed |
Adi Lucas Kauffman TildalWave user10211 AJ Henderson |
Needs more focus | |
| Jul 23, 2013 at 11:32 | history | edited | DaGhostman Dimitrov | CC BY-SA 3.0 |
added 466 characters in body
|
| Jul 23, 2013 at 11:20 | comment | added | DaGhostman Dimitrov | @mgibsonbr yes the data is stored on a trusted server(the server the application is hosted) and the concerns are if an attacker could get access to the user data, and with lower priority is a user accesing other users data | |
| Jul 23, 2013 at 11:01 | comment | added | DaGhostman Dimitrov | as I mentioned in the comment to @AJ's answer the certificates will be created as an storage file, was thinking to use the certificates(certificates like those which are used in authentication for example *.pk12) and to use a part of their Footprints for encryption key and IV in CFB encryption. | |
| Jul 23, 2013 at 9:29 | review | Close votes | |||
| Jul 23, 2013 at 14:31 | |||||
| Jul 23, 2013 at 6:34 | comment | added | that guy from over there | what do you mean with "self-signed SSL certificates that will correspond to each user"; do you want to authenticate your users via client-based certs or do you mean ssl-encryption-certs? | |
| Jul 23, 2013 at 4:36 | answer | added | tylerl | timeline score: 4 | |
| S Jul 23, 2013 at 4:13 | history | edited | Xander | CC BY-SA 3.0 |
Grammatical corrections.
|
| S Jul 23, 2013 at 4:13 | history | suggested | e-sushi | CC BY-SA 3.0 |
Typo corrections.
|
| Jul 23, 2013 at 3:56 | review | Suggested edits | |||
| Jul 23, 2013 at 4:13 | |||||
| Jul 23, 2013 at 3:25 | comment | added | mgibsonbr | Could you please clarify whether you're concerned with one user accessing data from other users, or just with an external attacker accessing data from any of your users? Also, I'm assuming the server itself is trusted, i.e. it can access data from every user. Otherwise, things would get a bit tricky... | |
| Jul 23, 2013 at 3:04 | answer | added | mgibsonbr | timeline score: 3 | |
| Jul 23, 2013 at 2:12 | answer | added | AJ Henderson | timeline score: 9 | |
| Jul 23, 2013 at 0:37 | history | asked | DaGhostman Dimitrov | CC BY-SA 3.0 |