Skip to main content
bobince's user avatar
bobince's user avatar
bobince's user avatar
bobince
  • Member for 12 years, 5 months
  • Last seen more than a month ago
4 votes

Faster SQL injection prevention

3 votes

"<" and ">" is filtered, is there any way bypass it?

1 vote
Accepted

Are input fields that don’t have name=“” sent via the browser

5 votes
Accepted

Exploiting XSS with window.name without iFrame

1 vote

PCI compliance and external resources http/https

1 vote

Session Fixation - Setting path to root without /

3 votes

SQL injection is possible but selected queries not working

11 votes

Is it safe to serve any user uploaded file under only white-listed MIME content types?

4 votes
Accepted

What risks are introduced by the browser passing the "referer" to the next site visited from a link to another domain?

3 votes
Accepted

Retrieving CSRF token cross-domain using JSONP, risky?

1 vote

Simpler idea for protection against reflected XSS on client side

8 votes
Accepted

Is it reasonable to keep control panel in separate subdomain or domain?

9 votes

Why should one not use SSL?

2 votes
Accepted

Increasing tomcat session id increases security

8 votes

Is my hashing method secure?

7 votes
Accepted

Have I done enough not be compromised through image uploading

2 votes

Is my user authentication method secure? Am I reinventing the wheel?

2 votes

Protecting <a href='{{ my_model.some_url }}'> in Django

10 votes
Accepted

is 'mysql_real_escape_string' enough

0 votes

Are Modern Servers susceptible to HTTP Splitting Attacks

5 votes

Is Django's built-in CSRF protection enough?

3 votes

Windows Authentication and Session Ids

2 votes

What are the security benefits of reset all fields if captcha was failed?

1 vote
Accepted

Seeking help with implementing SCRAM in .NET

6 votes

What kind of software can be used to remove Rootkit.Sirefef.Gen?

0 votes

Prevention against Cryptolocker virus by requesting password for all installing apps in Windows 7

6 votes
Accepted

Why does MySQLi using question marks (?) instead of the sprintf formatting?

1 vote

How is "security word" safe from man in the middle attack?

23 votes
Accepted

Does setting httponly prevent stealing a session using XSS?

16 votes
Accepted

Is it possible to do SQL injection (HIGH Level) on Damn Vulnerable Web App?