User bobince

54 votes

Which is the best way to sanitize user input in PHP?

answered Sep 16, 2013 at 20:11

4 votes

Accepted

Advantages of multiple valid CSRF tokens

answered Feb 9, 2014 at 23:52

9 votes

Accepted

Entering sensitive information into non-SSL site that uses secure iFrame

answered Mar 2, 2013 at 13:42

4 votes

Can CSRF protection work even if an XSS vulnerability exists?

answered Apr 11, 2016 at 21:20

3 votes

Why there are so many web servers which get exploited by generating obfuscated files?

answered Mar 2, 2016 at 23:59

3 votes

Accepted

Can F5's Big-IP ASM protect against CSRF for AJAX calls?

answered Jan 9, 2016 at 12:43

2 votes

IIS - RequestFiltering for #

answered Jun 16, 2015 at 11:43

2 votes

Error message in Apache logs shows /bin/bash and wget

answered May 14, 2015 at 21:33

2 votes

Security of applications on .net platform

answered May 10, 2015 at 16:54

1 vote

How to secure yourself against jQuery preventDefault phishing?

answered May 10, 2015 at 16:25

3 votes

Detecting malicious domains/URLs

answered Apr 3, 2015 at 13:44

2 votes

non-https winscp website

answered Mar 21, 2015 at 13:19

4 votes

Is the convertomp3.com website hacked? :)

answered Jan 31, 2015 at 11:31

3 votes

IIS 7 World Wide Web Publishing Service service account

answered Jan 18, 2015 at 14:13

3 votes

Accepted

Using classic ASP, is this the right way to do to protect against XSS?

answered Dec 8, 2014 at 15:10

2 votes

How secure credit card order system with blank mail

answered Nov 24, 2014 at 20:59

24 votes

Accepted

Is it useful to protect hashed password with encryption?

answered Nov 12, 2013 at 12:50

6 votes

Difference Between MD4 and MD5 encryption

answered Oct 27, 2014 at 18:51

10 votes

What are these URLs in my browsers?

answered Oct 26, 2014 at 12:45

4 votes

Accepted

Why browsers implement stricter policy for local files

answered Oct 24, 2014 at 13:36

6 votes

Accepted

How to execute an XSS attack against a site that uses client side protection?

answered Oct 23, 2014 at 9:37

1 vote

Accepted

Will checking the CSRF token on the header and the form's hidden be enough?

answered Oct 9, 2014 at 18:19

4 votes

Is PCI-DSS compliance required for non-credit card payment source?

answered Oct 9, 2014 at 9:13

2 votes

How to implement password reset functionality without becoming susceptible to cross-domain referer leakage?

answered Oct 6, 2014 at 20:06

3 votes

Can unwanted software(like spyware) already present detect the user trying to install an antivirus software and go into hiding?

answered Sep 26, 2014 at 22:14

18 votes

New payment option on Paypal "Enter your online banking ID + password": Any mechanism that could make this safe?

answered Sep 24, 2014 at 13:51

3 votes

XSS in JavaScript

answered Sep 21, 2014 at 15:39

6 votes

How can hackers guess passwords (using dictionary attack or brute force) without being locked out?

answered Sep 19, 2014 at 21:00

3 votes

Accepted

Why doesn't this XSS attack work?

answered Sep 19, 2014 at 5:23

3 votes

Accepted

Is addslashes + htmlentities sufficiently secure?

answered Sep 16, 2014 at 19:56

Stack Exchange Network

159 Answers

Which is the best way to sanitize user input in PHP?

Advantages of multiple valid CSRF tokens

Entering sensitive information into non-SSL site that uses secure iFrame

Can CSRF protection work even if an XSS vulnerability exists?

Why there are so many web servers which get exploited by generating obfuscated files?

Can F5's Big-IP ASM protect against CSRF for AJAX calls?

IIS - RequestFiltering for #

Error message in Apache logs shows /bin/bash and wget

Security of applications on .net platform

How to secure yourself against jQuery preventDefault phishing?

Detecting malicious domains/URLs

non-https winscp website

Is the convertomp3.com website hacked? :)

IIS 7 World Wide Web Publishing Service service account

Using classic ASP, is this the right way to do to protect against XSS?

How secure credit card order system with blank mail

Is it useful to protect hashed password with encryption?

Difference Between MD4 and MD5 encryption

What are these URLs in my browsers?

Why browsers implement stricter policy for local files

How to execute an XSS attack against a site that uses client side protection?

Will checking the CSRF token on the header and the form's hidden be enough?

Is PCI-DSS compliance required for non-credit card payment source?

How to implement password reset functionality without becoming susceptible to cross-domain referer leakage?

Can unwanted software(like spyware) already present detect the user trying to install an antivirus software and go into hiding?

New payment option on Paypal "Enter your online banking ID + password": Any mechanism that could make this safe?

XSS in JavaScript

How can hackers guess passwords (using dictionary attack or brute force) without being locked out?

Why doesn't this XSS attack work?

Is addslashes + htmlentities sufficiently secure?