Exploit PHP’s mail() to get remote code execution
Exploit PHP’s mail() function to perform remote code execution, under rare circumstances.
Exploit PHP’s mail() to get remote code executionRead More »
PHP
PHP Tag Archive
Custom PHP version on IIS Express and WebMatrix 3
PHP 7 with OPcache in IIS Express for Microsoft WebMatrix 3: learn how to create your own PHP development environment easily with Microsoft WebMatrix and IIS Express and your own custom PHP version. Note: this guide also applies to newer PHP versions, just change the version numbers.
…Custom PHP version on IIS Express and WebMatrix 3Read More »
MySQL sleep() attacks
MySQL sleep() command injection attacks: how not validating your PHP user input can lead to Denial of Service (DoS) attacks against websites and back-end database servers. Simply by putting “AND sleep(3)” in the address bar… Here is how to put a MySQL server to sleep, happy SQL injection!
Magento maintenance script for IIS
Important Magento maintenance, now for IIS too: optimize the speed and performance of your Magento ecommerce webshop by carrying out important maintenance. Remove old MySQL database log files and Magento cache data on a regular basis.
…How to: Test MySQL database connectivity in ASP.NET, PHP, ASP
Simple MySQL connection test from your website with ASP.NET, PHP & classic ASP. Whenever you need a MySQL connectivity test from a website or server, it’s handy to have various test scripts nearby. Whether it is because you are setting up a new website or you have just installed a new server and are running your tests.
…How to: Test MySQL database connectivity in ASP.NET, PHP, ASPRead More »
How to hide the .php file extension with IIS URL Rewrite Module
Extensionless URLs in IIS
Sometimes it’s important to remove -or hide- the file extension of scripts you use. Security by obscurity might be that reason, if you don’t want others to know what script language you are using for your website, or for static site hosts. This example will hide the .php extension using the IIS URL Rewrite module, in a ready to use web.config & .htaccess example.
How to hide the .php file extension with IIS URL Rewrite ModuleRead More »
How to clean up Contact Form 7 temporary captcha files on IIS web servers
Contact Form 7 is a WordPress plugin that provides a simple but flexible contact form. On IIS, Contact Form 7 captcha has one HUGE disadvantage: temporary captcha files placed in wp-content/uploads/wpcf7_captcha, are not automatically removed. The files are made read only. Here is how to remove Contact Form 7 temporary captcha files on IIS…
How to clean up Contact Form 7 temporary captcha files on IIS web serversRead More »
Set or remove the read-only attribute assigned to files with PHP chmod
Chmod.php, change file attributes with PHP, to make files read only or normally accessible on Windows IIS servers. Sometimes you need chmod to make files read only on your website, or make them normally accessible in case they already are read only. For instance Drupal’s settings.php configuration file, or WordPress Contact Form 7 temporary captcha files, are examples of read-only files.
Set or remove the read-only attribute assigned to files with PHP chmodRead More »
Validate MIME types with PHP Fileinfo
How to check the file type in PHP and secure file uploads: it is important to validate MIME types in PHP. Especially of files uploaded through an upload form to your website. Using PHP, the best way to validate MIME types is with the PHP extension Fileinfo. Any other method might not be as good or secure as you might think…
…Optimize all MySQL tables with PHP/MySQLi multi_query
The PHP MySQLi extension supports multiple queries, which are concatenated by a semicolon, with mysqli->multi_query. We use this to optimize all MySQL tables, in a single multi-query statement. Neat! Optimizing MySQL tables is important to keep tables small and fast. This boosts MySQL, PHP and website performance and we all love that, don’t we? :)
Optimize all MySQL tables with PHP/MySQLi multi_queryRead More »
WordPress plugin “In Over Your Archives” Call-time pass-by-reference fix for PHP 5.4
How to fix PHP Call-time pass-by-reference has been removed in errors. The following PHP fix goes for nearly all PHP Call-time pass-by-reference errors: The WordPress plugin In Over Your Archives is a plugin to display your archive page in a nice way, just like on inoveryourhead.net. The plugin hasn’t been updated in quite some time and breaks with PHP version 5.4:
…WordPress plugin “In Over Your Archives” Call-time pass-by-reference fix for PHP 5.4Read More »
How to load google-code-prettify syntax highlighting without plugins
If you run a WordPress blog where you display (parts of) source code, syntax highlighting is a must! It prettifies the code which makes it easier to read and it distinguishes code from text. However, most syntax highlighting is made available through plugins, and we all know too many plugins bring a lot of overhead to your blog.
…How to load google-code-prettify syntax highlighting without pluginsRead More »
How to fix Joomla HTTP 500 errors after updates
Over the last week, at Vevida, we received quite some problem reports from customers who updated Joomla to version 3.2.0. After logging on to their administrator back-end, they received an HTTP 500.0 error with error code 0x8007000d. Let’s investigate and resolve this Joomla Administrator login HTTP 500 error.
…WordPress CMS admin password reset
How to reset your WordPress password? If you’ve lost or forgotten your WordPress admin password, you can easily reset the password. Either use the following MySQL statement to reset your WordPress admin password, or change it through functions.php.
Don’t turn off CURLOPT_SSL_VERIFYPEER, fix your PHP configuration
An often heard solution to PHP cURL errors with SSL is to turn off CURLOPT_SSL_VERIFYPEER. Please don’t turn off CURLOPT_SSL_VERIFYPEER, but fix your PHP config instead. This article provides you two solutions to solve CA certificate validation errors with PHP cURL and OpenSSL. For system administrators and end-users.
Don’t turn off CURLOPT_SSL_VERIFYPEER, fix your PHP configurationRead More »