php Programming Glossary: protection
When to use single quotes, double quotes, and backticks? http://stackoverflow.com/questions/11321491/when-to-use-single-quotes-double-quotes-and-backticks to use an API supporting prepared statements instead as protection against SQL injection . Same thing with some variable replacements..
Is it possible to protect from downloading a video from a site http://stackoverflow.com/questions/1790190/is-it-possible-to-protect-from-downloading-a-video-from-a-site see last paragraph . This is the common problem with copy protection you are unable by any means to distinguish between a legitimate.. if you don't care that a determined user will bypass your protection and if it's enough to protect the video from 90 of users I believe..
ACL implementation http://stackoverflow.com/questions/3430181/acl-implementation secured instance in any other object it will retain the protection wrap it forget it .. you can pretend that it is the original..
How should I choose an authentication library for CodeIgniter? http://stackoverflow.com/questions/346980/how-should-i-choose-an-authentication-library-for-codeigniter security model around failed login attempts good protection against bots and DoS attacks Minor Cons Lost password codes..
Secure hash and salt for PHP passwords http://stackoverflow.com/questions/401656/secure-hash-and-salt-for-php-passwords I'd like to know which mechanism to use for password protection. This question Is œdouble hashing a password less secure than.. times may be a good idea whereas How to implement password protection for individual files suggests using salt. I'm using PHP. I want.. pick a good salt in order to have a safe and fast password protection mechanism. Related questions that don't quite cover my question..
Simple Post-Redirect-Get code example http://stackoverflow.com/questions/4142809/simple-post-redirect-get-code-example only of echo _SESSION 'form_html' . That seems to me like protection against both page reload and back button problems. Did I goof..
HTTP authentication logout via PHP http://stackoverflow.com/questions/449788/http-authentication-logout-via-php php authentication .htaccess http headers password protection share improve this question Mu. No correct way exists not..
Why shouldn't I use PHP's mail() function? http://stackoverflow.com/questions/4565066/why-shouldnt-i-use-phps-mail-function does not allow mails send by PHP mail common spam protection Errors in the format of header or content can cause that mails..
How do you use bcrypt for hashing passwords in PHP? http://stackoverflow.com/questions/4795385/how-do-you-use-bcrypt-for-hashing-passwords-in-php Could anyone explain php passwords cryptography password protection bcrypt share improve this question You do bcrypt is an hashing..
Php & Sql Injection - UTF8 POC http://stackoverflow.com/questions/5139127/php-sql-injection-utf8-poc PDO or mysqli mysql_real_escape_string is some of the best protection you've got when you need to concatenate together some SQL. I.. through iconv with IGNORE TRANSLIT should be good enough protection usually by truncating the string at the point of the bad sequence..
Are mysql_real_escape_string() and mysql_escape_string() sufficient for app security? http://stackoverflow.com/questions/5414731/are-mysql-real-escape-string-and-mysql-escape-string-sufficient-for-app-secu server people know about. Because of this extra level of protection you are far safer than by just using escaping no matter how..
Encrypt php code http://stackoverflow.com/questions/764927/encrypt-php-code Does anyone have any other ideas php obfuscation code protection share improve this question I put together the following..
How to detect fake users ( crawlers ) and cURL http://stackoverflow.com/questions/12257584/how-to-detect-fake-users-crawlers-and-curl 06 traffic_light_green.png ' You can try it here here . Protection against proxies Some words about the different kind of proxies..
Login without HTTPS, how to secure? http://stackoverflow.com/questions/2336678/login-without-https-how-to-secure still a violation of OWASP A9 Insufficient Transport Layer Protection because you would still be transmitting session credentials..
How to get SSL certificate info with CURL in PHP? http://stackoverflow.com/questions/3081042/how-to-get-ssl-certificate-info-with-curl-in-php 21 34 12 GMT path domain .google.com Title Google X XSS Protection 1 mode block But with CURL the header is much shorter HTTP 1.1.. 2012 21 39 07 GMT path domain .google.com Server gws X XSS Protection 1 mode block Transfer Encoding chunked Is there any possibility..
Session hijacking and PHP http://stackoverflow.com/questions/3517350/session-hijacking-and-php way of addressing OWASP A9 Insufficient Transport Layer Protection . This way of using HTTPS is sometimes called secure cookies..
Protection against XSS exploits? http://stackoverflow.com/questions/5414962/protection-against-xss-exploits against XSS exploits I'm newish to PHP but I hear XSS exploits..
PDO support for multiple queries (PDO_MYSQL, PDO_MYSQLND) [closed] http://stackoverflow.com/questions/6346674/pdo-support-for-multiple-queries-pdo-mysql-pdo-mysqlnd but you risk to be injected with multiple queries. From Protection against SQL Injection using PDO and Zend Framework June 2010..
SQL Injection Protection http://stackoverflow.com/questions/7343451/sql-injection-protection Injection Protection I thought I would get your opinion on an option I thought that..
PHP/Web Script Protection http://stackoverflow.com/questions/991542/php-web-script-protection Web Script Protection I want to write a script in PHP and javascript and somehow..
|