All too often I come across code that just shouldn’t be on a web server. Code like this:
$todaydate = date(”Y-m-d”);
if($_REQUEST['cid']){
$query = “SELECT * FROM hr where hrid=’$_REQUEST[cid]‘”;
[...]
Archive for December, 2007
Programmers Need Security Too
SecureCRT TFTP
I use SecureCRT for most of my remote session work. The program allows you to write scripts to automate tasks such as routine procedures (i.e. changing passwords, running commands, etc). In this case, I wrote a script to backup Cisco firewalls using TFTP.
# $language = "PerlScript"
# $interface = "1.0"
# SecureCRT script used to backup multiple [...]
CEH PrepLogic Review
PrepLogic CEH 315-50 Exam Material Review
Over the past several months, I have been studying for the EC-Council’s Certified Ethical Hacker certification. I took the offered curriculum at a nearby training facility and then proceeded to train/study in my spare time. To supplement the course material, I decided I should pick up something more, such as [...]
Featured Articles
Protect Your PHP Includes...
Line 1: <?php Line 2: if ($_SERVER['REQUEST_URI'] == $_SERVER['PHP_SELF']) Line 3: exit(); [+]
Default Installations...
What is it with people leaving default installations public facing? They must think I don't [+]
Account Lockout in Linux - PAM Tally...
Some pretty basic functions are missing from most of the *-nix systems by default. One [+]
Categories
Archives
- November 2008 (1)
- October 2008 (4)
- September 2008 (1)
- August 2008 (3)
- July 2008 (1)
- June 2008 (3)
- May 2008 (2)
- April 2008 (3)
- March 2008 (2)
- February 2008 (3)
- January 2008 (2)
- December 2007 (3)
Meta
Google Ads
Recent Articles
- Protect Your PHP Includes
- Default Installations
- Account Lockout in Linux - PAM Tally
- Squid Log Parsing
- Oops… Bring out the backup.
- CISSP Begins…
- Outlook Organization
- Motorcycle Helmet Laws
- America needs more people like this asap
- American Musical - What you should not do.
Popular Tags
- beer browser ceh cell phones certs conversion cookies domain downloads firefox gadgets giac hacking incident response ipod isc linux minefield money mp3 pdf Perl php pix politics prelogic privacy programming registrars review sanitize input sans satillite radio scripting Scripts securecrt security sirius spam studying tftp toolkit validation vulnerability scanner web logs
