New answers tagged php
0
For sanitization, You can refer here https://stackoverflow.com/questions/42657352/how-can-i-stop-command-injection-when-using-shell-exec-in-php7
TL;DR:
Use escapeshellcmd for escaping full command to be executed, or escapeshellarg to escape arguments only for given command.
-1
On PHP you can quote strings with either single-quotes or double-quotes. They behave a bit different -variables are only interpolated inside double-quoted strings- but the only difference in this example is that when you quote the PHP string with single quotes then you can't embed single quotes, that's why they use double quotes. Similarly, when using a ...
2
First part of question is ... how would I exfiltrate information with
this " condition I have found? Is there a special name for it other
than SQL injection that I can read more about?
No, this is exactly SQL injection. If the results of the query are being printed, it's possible to use UNION to mix in data from other tables that are not intended to be ...
1
What happened?
The vulnerability scanner thinks that it found a possible reflective XSS or HTML injection vulnerability in the page.
When it injected Oui"sTYLe='acu:Expre/**/SSion(Afih(9717))'bad=" as a GET request parameter, the page rendered with the following element in it:
<a href="https://trojanmart.com/SSionAfih9717" title="Français " class=" "&...
-3
Acunetix system was able to inject
"sTYLe='acu:Expre/**/SSion(Afih(9717))'bad="
in your url and it is reflecting in your html code output. You should parse everything that is in double code especially special characters that is not normally used in url such as quote, double quote, stars... especially those that can affect an Sql Database.
You can clean ...
-1
The correct way to do this is to break the identifying information in half. The first half is what you query against, the second half is the secret that is encrypted with bcrypt (or pbkdf2, scrypt or equivalent).
The key thing to understand is that it's not possible to make a query constant-time in most databases, so you need to work around that fact.
...
0
There's three different concerns that get conflated a lot:
You need to make sure the server can't be tricked into executing code.
You need to make sure the server can't be tricked into serving a user-uploaded file with a Content-Type (html, svg, xml) that allows Javascript to execute within the site's origin when a user accesses the file.
Optionally you ...
0
There are two potential implementations for this:
Check the file hash against VirusTotal
Implement an internal anti-malware scan
The security of your application and storing the temporary files securely is up to your secure development skills. There is a potential vector, where an insider threat or a malicious actor would upload a ransomware virus like ....
Top 50 recent answers are included
