Bona Fide OS Developer
View unanswered posts | View active topics It is currently Mon Mar 18, 2024 9:51 pm



Post new topic Reply to topic  [ 23 posts ]  Go to page Previous  1, 2, 3
 Forum PW's... 
Author Message

Joined: Wed Oct 14, 2009 9:39 am
Posts: 198
Location: United States
Post Re: Forum PW's...
Not true...I DMZ'd my system to listen for a while and Comcast uses Hubs here, which explains why its soo slow and shoddy. Hubs mean that all packets are being forwarded to all destinations. If you use any public free wifi you are at risk for password. You can get a free SSL Cert from Comodo. It expires every 90days, but its well worth it :-D

_________________
Charles Timko
push %esp ;Musings of a computer addict


Wed Feb 02, 2011 12:44 am
Profile WWW

Joined: Wed Oct 14, 2009 9:39 am
Posts: 198
Location: United States
Post Re: Forum PW's...
JamieGBH435 wrote:
If you can see 2 lines of php code here then this hack didn't work, otherwise if you see the word "LOL" anywhere on the page then the hack worked via php injection
";echo "lol";
';echo "lol;
and the reply post routine needs looking at


Jamie,

Nearly all web-technologies protect against PHP injections, because well, that's easy. You would have to be using bad PHP development techniques to have PHP Injections work...like building the datastructs prior to running it through the PHP engine, or using a PHP page to generate a PHP page...You should only ever use PHP to generate an xHTML page, never a actual dynamic response. The important one is SQL injections, which phpBB sanitizes pretty well..there are a few very obfuscated SQL attacks that still can be done, but they require a LOT of time to figure out the intricacies of this server (what character sets PHP supports versus the HTTP daemon versus the DBMS).

_________________
Charles Timko
push %esp ;Musings of a computer addict


Wed Feb 02, 2011 12:59 am
Profile WWW
Site Admin

Joined: Fri Jul 24, 2009 10:02 pm
Posts: 247
Location: Las Vegas, NV, US
Post Re: Forum PW's...
I guess the only problem with SSL is setting up a dedicated IP for the server. I can add an IP for like $1/mo up to like 6 IPs. Is this something worth doing still?


Mon Aug 22, 2011 12:43 pm
Profile
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 23 posts ]  Go to page Previous  1, 2, 3


Who is online

Users browsing this forum: No registered users and 3 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
cron
Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group.
Designed by Vjacheslav Trushkin and tweaked by the BF Team.