Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > comp.lang.php > #10027

Re: Help with Security Have I coded this correctly?

Show all headers | View raw

On 7/2/13 11:50 PM, chirag sharma wrote:
> I have created an online PHP code executor at http://web.guru99.com
>
> Though I have checked all security aspects … do you experts see any major flaw that I need to care of?
>
I get a 403 forbidden on the AJAX request in both Chrome and Firefox.

I don't know what you've done to protect against attack. Are you safe 
against the following type of attack? Are you just scrubbing the input, 
or have you actually locked-down and hardened the PHP itself?

<?php
$foo = "scan";
$foo .= "dir";

var_dump($foo('.'));
?>

Back to comp.lang.php | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

Help with Security  Have I coded this correctly? chirag sharma <chiragsharma.guru99@gmail.com> - 2013-07-02 23:50 -0700
  Re: Help with Security  Have I coded this correctly? Arno Welzel <usenet@arnowelzel.de> - 2013-07-03 17:05 +0200
  Re: Help with Security  Have I coded this correctly? Twayne <nobody@spamcop.net> - 2013-07-03 12:31 -0400
    Re: Help with Security  Have I coded this correctly? Arno Welzel <usenet@arnowelzel.de> - 2013-07-09 16:20 +0200
  Re: Help with Security  Have I coded this correctly? Timothy <timothy@nospam.tld> - 2013-07-03 17:42 +0000
  Re: Help with Security  Have I coded this correctly? Christoph Michael Becker <cmbecker69@arcor.de> - 2013-07-03 19:52 +0200
  Re: Help with Security  Have I coded this correctly? Daniel Pitts <newsgroup.nospam@virtualinfinity.net> - 2013-07-03 11:12 -0700
    Re: Help with Security  Have I coded this correctly? Christoph Michael Becker <cmbecker69@arcor.de> - 2013-07-03 20:35 +0200
      Re: Help with Security  Have I coded this correctly? kishorguru99pvtltd@gmail.com - 2013-07-08 01:49 -0700
        Re: Help with Security  Have I coded this correctly? Jerry Stuckle <jstucklex@attglobal.net> - 2013-07-08 08:48 -0400

csiph-web