Archive for the ‘security’ Category

AJAX - A simple Introduction

Thursday, July 24th, 2008

AJAX has became the new buzz word of the internet, but what is it? and what does it actually do?

Introduction

Suppose we have a webpage, displaying news.

Now, for the user to switch from one news story is pretty unefficient.
The only part of the webpage that changes is the news content area, though the whole page (graphics and all) is reloaded from the webserver. Wouldnt is be great if there is some way we could only change part of the html?

(more…)

Share and Enjoy:

  • Digg
  • Sphinn
  • del.icio.us
  • Facebook
  • Mixx
  • Google
  • Blogsvine
  • E-mail this story to a friend!
  • LinkedIn
  • Live
  • NewsVine
  • Print this article!
  • Reddit
  • Slashdot
  • Spurl
  • StumbleUpon
  • Technorati
  • YahooMyWeb

Writing Secure PHP scripts

Thursday, July 24th, 2008

One of the most overlooked things in Web Development - especially in PHP - is making sure that your scripts are secure. Here’s some details of some basic mistakes people make when programming websites in PHP, and how these little mistakes can be used by any malicious user to gain access to the website. This is by no means a full article, but it covers the basic errors, and how to remove them from your code.

Ultimately, a ‘hacker’ wants to gain access to a website for a variety of reasons. Maybe to steal users details, bank account information etc, or even just to simply deface it. Either way, as programmers, we have to be aware of the methods they use so that we can write code that is secure.
This article will cover 4 basic areas:

  • Register Globals
  • XSS ( Cross Site Scripting ) attacks
  • Session Id Stealing
  • SQL Injections (more…)

    Share and Enjoy:

    • Digg
    • Sphinn
    • del.icio.us
    • Facebook
    • Mixx
    • Google
    • Blogsvine
    • E-mail this story to a friend!
    • LinkedIn
    • Live
    • NewsVine
    • Print this article!
    • Reddit
    • Slashdot
    • Spurl
    • StumbleUpon
    • Technorati
    • YahooMyWeb