Security, Windows Server
Storing SSH public keys in Windows Server Active Directory gives you a single location where you manage public SSH keys instead of on numerous separate servers. This is easier than distributing and managing numerous unmanaged authorized_keys files across your network and servers.
Security
Last updated:
Since Apache 2.4.6, a new module is used to configure and set up access control for websites: mod_authz_core. This means you have to use a different syntax for allowing or blocking hosts and IP addresses to your website. Apache Access Controle done right in WordPress .htaccess.
Security
Last updated:
It all started by auditing Pornhub, then PHP and ended in breaking both… We have gained remote code execution on pornhub.com and have earned a $20,000 bug bounty on Hackerone. We have found two use-after-free vulnerabilities in PHP's garbage collection algorithm. Those vulnerabilities were remotely exploitable over PHP's unserialize function.
Security
Last updated:
A very interesting read about how PHP rand() works, how to attack and crack it, and why you must not use it for security tokens.
Security
Last updated:
Joomla websites with the vulnerable Googlemaps plugin are abused as open proxy for DoS attacks. Here is how to block plugin_googlemap2_proxy.php.
Security
Last updated:
Summer vacation's over? In August 2014 I noticed a huge increase in SQL injection attacks on various websites. These are their characteristics.
Security
Last updated:
How not validating PHP user input leads to MySQL sleep() injection attacks that hang your database server, and how to fix and clean it up.
Security
Last updated:
Uh-oh, a prettyPhoto DOM based XSS on Saotn.org... What it is, why it can be dangerous, and how to fix it in jquery.prettyPhoto.js.