Collaborate Disseminate
In June, 1995, Rasmus Lerdorf made an announcement on a Usenet group. You can still read it.
Announcing the Personal Home Page Tools (PHP Tools) version 1.0.
These tools are a set of small tight cgi binaries written in C.
Today, twenty five years on, PHP is about as ubiquitous …read more
Continue reading Does PHP Have A Future, Or Are Twenty Five Years Enough?
We have a Laravel 5.6.x application running as a REST backend with PHP 7 on one of our servers. The server uses CentOS with WHM/cPanel/PhpMyAdmin
Recently that server issued a maldet warning (our malware detector) after it saw some strange… Continue reading Identifying Source of Malware Attack on Laravel App
I have a Laravel site, I thought I patched this issue already.
I got these in my session.php
‘secure’ => true,
‘http_only’ => true,
But OpenVas still detected that I still need to it.
It also listed it 3 times
Am I miss… Continue reading Missing HTTPOnly Cookie Attribute in Laravel 7
In my company, I have an existing website built with Laravel, and they want me to use SimpleSaml for SSO logins with an existing IDP. I am very new to PHP as I am a .NET developer and I would like to know how to do this (first steps for a … Continue reading PHP SimpleSAML SSO integration
If I want to deploy a Laravel WebApp using MySQL DB on a VPS like DigitalOcean, Vultr or similar platforms, should I separate the VPS into WebApp VPS and MySQL VPS? Is it more secure?
And what if I separate the Laravel project into AdminPr… Continue reading Is it more secure if I separate VPS into WebApp/MySQL VPS & separating WebApp projects into Admin/User projects
I have a Laravel 6 site, and a legacy Drupal 7 site. Both are served under the same domain, and both share the same user database table.
I’d like users to be able to log in via Laravel (never via Drupal) and then browse between the two sy… Continue reading Session sync between two web apps on the same domain
A misconfigured website development tool exposed hundreds of email servers to takeover, including President Donald Trump’s official campaign website. Continue reading Trump Campaign Website Left Open to Email Server Hijack
I want to test laravel exploit poc based on https://github.com/kozmic/laravel-poc-CVE-2018-15133/
I did docker steps to reach laravel home page on localhost:8000 then i got APIkey and simply i put APIKEY in php command to fi… Continue reading laravel-poc-CVE-2018-15133
I’m building a website using Laravel and I’m just thinking about security.
I would like to know if there is a way for attacker to detect all active web routes for a website ?
For example:
http://example.com/login
http://example.com/prod… Continue reading How to detect website active routes?