Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > comp.lang.php > #17493
| Path | csiph.com!fu-berlin.de!uni-berlin.de!individual.net!not-for-mail |
|---|---|
| From | "J.O. Aho" <user@example.net> |
| Newsgroups | comp.lang.php |
| Subject | Re: Ecommerce site - how? |
| Date | Tue, 27 Jun 2017 07:19:02 +0200 |
| Lines | 51 |
| Message-ID | <ere866Fn9ftU1@mid.individual.net> (permalink) |
| References | <d2223e3b-f44c-4ef7-b55a-94e012d85a95@googlegroups.com> <oiodsn$pud$1@gioia.aioe.org> <PcqdnRTWK6vXeM3EnZ2dnUU7-X3NnZ2d@posted.internetamerica> <oir89b$187l$1@gioia.aioe.org> <ercr2hFf9c6U1@mid.individual.net> <oirfjf$1na2$1@gioia.aioe.org> <oirgc3$hu4$1@jstuckle.eternal-september.org> <oirinj$1t87$1@gioia.aioe.org> <erd5pbFhbolU1@mid.individual.net> <oirtfe$h7d$1@gioia.aioe.org> |
| Mime-Version | 1.0 |
| Content-Type | text/plain; charset=utf-8 |
| Content-Transfer-Encoding | 7bit |
| X-Trace | individual.net 9t1uYSm+NpaMRXlyQoZpuw7Cg/FcU1BAalpReouTVGB/Pm7RrN |
| Cancel-Lock | sha1:LkPm/dbfxQEd6BlpBllvRJTi+a8= |
| User-Agent | Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Thunderbird/52.2.0 |
| In-Reply-To | <oirtfe$h7d$1@gioia.aioe.org> |
| Content-Language | en-GB |
| Xref | csiph.com comp.lang.php:17493 |
Show key headers only | View raw
On 06/26/17 22:29, R.Wieser wrote: >> What about the case when it's time to renew your lease and you >> happen to be shopping and your ISP decided it's time for you to >> switch to a less busy network. > > Than you have a problem with your ISP, and not the e-commerce site. No, it's not an issue with ISP, it's the e-commerce site which is the issue. > Don't be as stupid to expect such a site to solve all the quirks the > intermediate ISPs have (purposely, often in full disregard to their > customers needs) inserted in their networks. So you mean that ISP should provide the worse possible customer experience so that badly designed e-commerce sites would keep on working? >> Also keep in mind that IP can also be spoofed in a number of ways, >> so keeping track of the IP is no way a good method, it's better to use >> request verification tokens. > > Lol. I could explain to you that CSRF attack and link hijacking defense > methods must-and-are rather different (the first is done within your > browser, the second definitily not), but as you are the one suggesting it yu > must have an idea how its applicable. So, be my guest and explain. > > And a hint: *both* parts of that "token" are placed in the same HTTP > request. Yes, it will be part of the same http post, but that don't mean it will be automatically added to CSRF request. So just make a second visit to OWASP and start reading. >> PS. Stop that stupid bottom posting of the previous post, even a >> second grade news reader like outlook can manage to keep track >> of threads. > > You're an arrogant, short-sighted shit Your here-and-now is not the only > thing thats important you know. Just imagine someone searching the web for > a certain answer, and all he can find is the current message. For that > reason I keep a copy of the origional post to at the bottom of my reply. Yes, if he finds current one, he will find the previous one too, unless using some obscure search engine that just index one message in each thread. > And if you do not like it, you *could* just stop at the line where I mention It's just extra work on your posts with deleting and by the way the your news client modifies the "original" text.
Back to comp.lang.php | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread
Ecommerce site - how? bit-naughty@hotmail.com - 2017-06-25 05:42 -0700
Re: Ecommerce site - how? "R.Wieser" <address@not.available> - 2017-06-25 15:30 +0200
Re: Ecommerce site - how? "J.O. Aho" <user@example.net> - 2017-06-25 16:03 +0200
Re: Ecommerce site - how? gordonb.y152t@burditt.org (Gordon Burditt) - 2017-06-26 05:43 -0500
Re: Ecommerce site - how? "R.Wieser" <address@not.available> - 2017-06-26 17:12 +0200
Re: Ecommerce site - how? "Christoph M. Becker" <cmbecker69@arcor.de> - 2017-06-26 17:54 +0200
Re: Ecommerce site - how? "R.Wieser" <address@not.available> - 2017-06-26 19:40 +0200
Re: Ecommerce site - how? "J.O. Aho" <user@example.net> - 2017-06-26 21:42 +0200
Re: Ecommerce site - how? "R.Wieser" <address@not.available> - 2017-06-26 23:14 +0200
Re: Ecommerce site - how? "Christoph M. Becker" <cmbecker69@arcor.de> - 2017-06-27 00:28 +0200
Re: Ecommerce site - how? "R.Wieser" <address@not.available> - 2017-06-27 10:48 +0200
Re: Ecommerce site - how? "J.O. Aho" <user@example.net> - 2017-06-27 07:56 +0200
Re: Ecommerce site - how? "R.Wieser" <address@not.available> - 2017-06-27 12:27 +0200
Re: Ecommerce site - how? "J.O. Aho" <user@example.net> - 2017-06-27 19:15 +0200
Re: Ecommerce site - how? "R.Wieser" <address@not.available> - 2017-06-27 22:01 +0200
Re: Ecommerce site - how? "J.O. Aho" <user@example.net> - 2017-06-28 07:07 +0200
Re: Ecommerce site - how? Gordon Burditt <gordon@hammy.burditt.org> - 2017-06-30 17:08 -0500
Re: Ecommerce site - how? "J.O. Aho" <user@example.net> - 2017-06-26 18:29 +0200
Re: Ecommerce site - how? "R.Wieser" <address@not.available> - 2017-06-26 19:17 +0200
Re: Ecommerce site - how? Jerry Stuckle <jstucklex@attglobal.net> - 2017-06-26 13:34 -0400
Re: Ecommerce site - how? "R.Wieser" <address@not.available> - 2017-06-26 20:11 +0200
Re: Ecommerce site - how? "J.O. Aho" <user@example.net> - 2017-06-26 21:31 +0200
Re: Ecommerce site - how? "R.Wieser" <address@not.available> - 2017-06-26 22:29 +0200
Re: Ecommerce site - how? "J.O. Aho" <user@example.net> - 2017-06-27 07:19 +0200
Re: Ecommerce site - how? "R.Wieser" <address@not.available> - 2017-06-27 11:24 +0200
Re: Ecommerce site - how? "J.O. Aho" <user@example.net> - 2017-06-27 19:43 +0200
Re: Ecommerce site - how? "R.Wieser" <address@not.available> - 2017-06-27 23:09 +0200
Re: Ecommerce site - how? "J.O. Aho" <user@example.net> - 2017-06-28 07:12 +0200
Re: Ecommerce site - how? Jerry Stuckle <jstucklex@attglobal.net> - 2017-06-27 21:10 -0400
Re: Ecommerce site - how? Jerry Stuckle <jstucklex@attglobal.net> - 2017-06-26 16:32 -0400
Re: Ecommerce site - how? "R.Wieser" <address@not.available> - 2017-06-27 10:30 +0200
Re: Ecommerce site - how? Jerry Stuckle <jstucklex@attglobal.net> - 2017-06-27 08:38 -0400
Re: Ecommerce site - how? "R.Wieser" <address@not.available> - 2017-06-27 17:47 +0200
Re: Ecommerce site - how? Jerry Stuckle <jstucklex@attglobal.net> - 2017-06-27 12:16 -0400
Re: Ecommerce site - how? gordonb.bytf1@burditt.org (Gordon Burditt) - 2017-06-29 18:16 -0500
Re: Ecommerce site - how? Jerry Stuckle <jstucklex@attglobal.net> - 2017-06-29 20:41 -0400
Re: Ecommerce site - how? gordonb.99a3p@burditt.org (Gordon Burditt) - 2017-06-29 23:39 -0500
Re: Ecommerce site - how? Jerry Stuckle <jstucklex@attglobal.net> - 2017-06-30 07:28 -0400
Re: Ecommerce site - how? Stefan+Usenet@Froehlich.Priv.at (Stefan Froehlich) - 2017-06-30 13:48 +0000
Re: Ecommerce site - how? gordonb.gcghn@burditt.org (Gordon Burditt) - 2017-06-30 16:15 -0500
Re: Ecommerce site - how? Jerry Stuckle <jstucklex@attglobal.net> - 2017-06-30 22:35 -0400
Re: Ecommerce site - how? Richard Damon <Richard@Damon-Family.org> - 2017-06-29 23:46 -0400
Re: Ecommerce site - how? gordonb.d2wed@burditt.org (Gordon Burditt) - 2017-06-29 17:32 -0500
Re: Ecommerce site - how? bit-naughty@hotmail.com - 2017-06-27 10:58 -0700
Re: Ecommerce site - how? Jerry Stuckle <jstucklex@attglobal.net> - 2017-06-27 15:34 -0400
Re: Ecommerce site - how? gordonb.4psc7@burditt.org (Gordon Burditt) - 2017-06-30 16:55 -0500
Re: Ecommerce site - how? bit-naughty@hotmail.com - 2017-07-01 03:03 -0700
Re: Ecommerce site - how? Jerry Stuckle <jstucklex@attglobal.net> - 2017-07-01 09:30 -0400
Re: Ecommerce site - how? Jerry Stuckle <jstucklex@attglobal.net> - 2017-07-01 09:34 -0400
csiph-web