Collaborate Disseminate
Here is the code:
<?php
$file=trim($_GET[‘img_name’]);
//echo $file;
if (file_exists($file)) {
header(‘Content-Description: File Transfer’);
header(‘Content-Type: application/octet-stream’);
header(‘Content-D… Continue reading Local file inclusion to RCE
Say I have a hypothetical PHP application which will store hashed passwords in a file in the same directory. At first, this seems like it would be very insecure, since one could guess at the name of the file and open it via a… Continue reading Is storing sensitive data in files instead of a database safe?
I’m helping out a friend with a PHP website he has been running for a few years. He is not PHP developer, so he asked if I could help him out.
I download the contents of the server files onto my laptop and found a strange he… Continue reading How can I tell is the hidden PHP code inside of a GIf file is dangerous? [on hold]
My hosting provider is telling me that they are misusing my server, I want to know which of my 40 wordpress sites is doing bruteforce to other wordpress sites external to my server.
I scanned with clamav but found nothing.
… Continue reading How to know what WordPress PHP file is making external requests?
The source code of my website is on a server multiple people can access via FTP.
How can I prevent them from accessing the source code?
Edit:
Ok, so I can’t do nothing about that. But, how about if I can compress the script and to change w… Continue reading How to prevent other users from accessing PHP source code?
Long-time Slashdot reader Qbertino writes: On PHPday in Verona (Italy) Rasmus Lerdorf, creator of PHP, gave an enlightening talk on PHP and its history. 25 years of PHP (video of the talk) is ripe with details on PHP, the design choices behind the web’… Continue reading ‘Why PHP Still Beats Your Next Favourite Alternative’
I copied the title from another question, but it wasn’t answered there and my case is a bit different.
I have inherited an old website to maintain. I noticed that the password hashing is not up to modern best practices, but I would like t… Continue reading Is a Whirlpool hash with random salt secure enough?
I just had a random occurrence when I went to one of my hosted websites, and saw the page was broken.
We host several domains at this IP, but one domain is actually in the server’s webroot directory, inside are all the direc… Continue reading Trying to figure out if I was hit by an obscure exploit attempt of some kind
$filename = $_GET[‘filename’];
if(preg_match(“/[^a-z\.]/”, $filename) == 1) {
echo “Hacker”;
die();
}
It can only include a file for this topic, but this file contains numbers. It has to be byp… Continue reading Please help me understand this PHP hack,how can i bypass this re
This question already has an answer here:
I found unknown PHP code on my server. How do I de-obfuscate the code?
2 answers
… Continue reading Just another suspiciously looking php script [duplicate]