[security] Forum Topics

Do you want to scan your website to find all the Vulnerabilities at your web site try netsparker :)

How to do coding for security in LTE???

I have a PC with 2 drives. A SSD which has my OS installed and a traditional HDD which has all my files and most of my programs on it. My question is do I have to install my new anti-virus on the OS drive or can if funciton properly …

Hi! I dont know what is the best thing to do to secure my website via internet and intranet. It happens that some of my pages should be able to view via the internet but all pages should keep running and able to access via intranet. On web.config I set …

Hi folks I want to universal website crawler using PHP, so my crawler will work on any given site. By using my web application, user will input any site, will provide input, what he needs to get from given site and will click on Start button. Then my web application …

Hello mates i am having user table in my database i need php code to restrict users other than administrator to update and delete operations on my website and users should not able to access user management web page.

I am having a problem with my Wordpress website and I think that it has been hacked. First of all, my site is really slow. I have also noted some funny content that has been added on my site. Could this be a sign that my site has been hacked? …

This will be a relatively quick article because it's a simple issue. The `system` function gets a lot of flak for being slow because it calls the shell runtime to execute a command, but I rarely see the more devastating issue of security brought up. `system` is insecure in many …

hey everyone, hope you people alright there. I got a computer lab and it is on 16 computer, had done networking and switches and everything of basic, what else I can do with the but dont have a server and i dont need one, but i want to apply some …

I need a lost password script for my existing login script. I need one that sends an email to the person once they enter their username. It is in a database with other things but the tables name is "profiles". The rows in that table are "id" "email" "username" "password". …

Learning the best way to securely upload files to a server Can someone tell me the best way to ensure that only image is uploaded using finfo() thereby preventing hackers from uploading a malicious files.Assuming I don't want to upload files outside the roots. 1: I check if file exist …

how to hide drives in my local computer and show it in my terminal servers using the same users , for example my user is wks410 when i loggged in my terminal servers all the drivers shoud be resitricted , when i logged in my local pc i need to …

I've focused my night on better grapsing authentication security and believe I have made good progress. To date I have simply relied on SHA1 hashing and prepared statements - not much, right... So I knew it was time to pick up some new skills. What I came across was very …

I want to hide my wordpress wp- links , my aim to do this is to save my web from hacking , any one who visit my site wil not judge that its a wordpress site . I have used many plugins to hide my url's and block access of …

Hello guys, i hope everyone is doing good. I'm willing to learn Network Security and after reading a number of blogs i think python is one of the best language for that (correct me if i'm wrong). I'm not an experinced programmer so i need some help regarding what should …

can any body share me a plugin or code for wordpress. I want any one can not access my signup form direct or indirect. Only admin can admin can add members through registration form . I want to restrict my existing signup form

what is important on the network l or p security? Logical or Physical and somethings, I don't know. If you know plz reply me. Thank you.

I'm working on a script that needs to use the Github API to allow the user to gain access to their Github account. I'm still really new to web programming, so I'm not really comfortable with how to securely transmit username and password combinations. I'm just wondering what are some …

Hi all, I want to restrict users directly accessing the html and pdf files(as URL) from my application server. When an user requests for this content, it should ask for login credentials. Please share your ideas for this. My application has LoginFilter and so I added <url-pattern>*.pdf</url-pattern> in the web.xml. …

int my_filewrite(char *question) { char filename[100]; int fd; printf(question); scanf("%s", filename); if (strlen(filename) > 100) } return 0; please can you help to find potential vulnerabilities in this code? Thank you.

hey there, I have created this simple app that makes use of a Robot instance. It is a network app that I control using telnet. I have tried it in two different computers. It works fine. However, in one of my computers, I manage to start my robot app through …

Hi, I can not create a database in the phpmyadmin. How do I enable the privilidges so I can create a database?  

Hi, In my website i have implemented custom session values. In which, on log on i set the session value to some object. This object is used to extract user specific data from db. now the problem is If user logs in with : test1.somesite.com and logs off and again …

i have problem my login it's not running plzzz help me <?php session_start(); require("dbc.php"); if(isset($_POST['submit'])) { $username =mysql_real_escape_string( $_POST['username']); $password =mysql_real_escape_string($_POST['password']); if ($username && $password) { $connect=mysql_connect("127.0.0.1","root","") or die("couldnt connect to database"); mysql_select_db("login") or die("couldnt find database"); $query = mysql_query("SELECT * FROM `users` WHERE `username` ='$username'"); $numrows = mysql_num_rows($qurey); if($numrows …

Well I am new in the asp.et mvc platform. In the course of my reading I discovered that ASP.NET MVC leaves the programmer to do most of the security. so I have decided to start this discussion so that young developers like me can learn from the highly experience people …

Hello Coders :), feel good when error comes..but when it take lots of time and make me fail to solve,getting eritate mind... SO finaly comming to you guys with one hope that you all will help me to solve this.... I am working on asp(Classic) application ..to converting old classic …

Hi, I'm wondering if what I want to do is best practice or not. We are just about to go live with a new site (built by another company) and pages of this will need to make calls to a web service which will be hosted on the same server …

Dear Friends, I've created a lit bit advanced web site(Online Library System). Before publishing it, now i wants to check its security level. I meant, can hackers attack my site? blah blah blah... Is there any tools to check ???

In todays time has its own value and we all need to save it by some or other means. By considering the time factor I am looking for a secure web conferencing appliance. The appliance should be secure to use. Do you have any suggestions that can help me decide …

Just got a 16 GB PNY flash drive from Wal-Mart and formatted it to ext4. Any idea how I could put access security on the drive? I would prefer security to protect against other OSs as well. Thanks.

Though am still a learner, I have developed a small php application and planning to sell the same. Meantime, I would like to protect my script using api or something and srictly not obfuscating or encoding, or using zend frame work? Is there any easy way? using base64decode, I should …

What are the main things I need to pay attention to them Process of building a strong security system?

Hi Actually i had a doubt regarding How to design a application where we can protect specific folders with the help of password I Hope i will be responded as soon as possible Thank you With Regards Syed

ok I have a login form that works and checks but I can just pout in the url to go to a specific page inside of the website I am designing and get into it without logging in, how can I remedy this? I have gone through many tutorials and …

Hello Daniweb, I'm in the process of completely re-doing my home network. On my network I run three servers: * Server 1 - Web and Database Server * Server 2 - Backups and Other General Home Use * Server 3 - Development and Testing I have previously used Ubuntu Server, …

I'm dipping my toe in the water of salted passwords by upgrading an older webapp, and would like to present the rough outline of how my system would work in the hope that those with more experience than I might tell me if I'm going in the right direction; In …

Hello there, I have a big big problem in my project, I have a login page , so everyone log in, the **session** will be his **id** $_SESSION['userid'] = $id; till now there is no problems, I put a header file to check the user is logged in or not …

I know I could parse the files name for the extension, but that can be faked. I know I can get the mime type, but they can also be faked. I know I could use Magic Numbers, but on some files, they are not at the top of the file. …

hello dear friends I wnat to know hos is security involve under Mac OS especially security of the hardware thanks...

Hi I really need some help! Recently one of my sites have been hit with an iframe injection: `<iframe scrolling="no" frameborder="0" src="the source changes but normally htttp://collegefun4u.com/" width="0" height="1"></iframe>` It happens at random times and gets inserted in random include files. We have clean scanned all computers + server for …

Hello, I have a few free dating sites and want block dating spammers who register on my websites. I have been using htaccess to block a lots of IP addresses from my free dating sites. However, they still come back to register their profiles at my sites. Is there a …

Hey everyone, No errors here but I was wondering..is there an easy way to simply "add" an administrator in a log-in script to redirect to a certain area of a website that the administrator can only access? Any advice would be greatly appreciated :)

Hello, Is there a way to put some security in the jar files? the java codes are inside the jar file how do i prevent user to see my java codes...

Hi there! I'm new to MySQL. What security measures should I take to ensure security of my databases? Any keywords? For instance, often times when logging into the DB, you must enter the user and pwd to gain access. How can I make that more secure? It's obviously in plain …

i have a signup form on my website for user registeration ....... so i want to make it secure , by secure i mean , Password should be encrypted etc etc.....or any other precautions for security i already used hash functions of MS SQL on password field through queries but …

Like Is It even possible or true a person can take a websites IP address and insatll It or clone It to his or her modem? Taking a websites IP and modifying It with his modem so the modem and the websites IP Matches... then the person can cause trouble …

Hi – I am new to .net security. I am following Mastering visual C#.net book to learn it.I have the following program in Visual Studio 2008. using System; using System.IO; using System.Security.Permissions; [assembly:FileIOPermissionAttribute(SecurityAction.RequestMinimum, All=@”c:\\temp”)] class Example19_1 { public static void Main() { // Create a new file to work with …

Hi there guys, not sure if anyone can help me here. I am creating a basic members site with small gallery and I wish to lockdown the URL somehow. e.g. http://domainname.com/memberFiles/8/gallery/gallery_config.php At the moment all of the other pages are locked down via a session id variable, but I need …

hello! i want to know about maximum mysql strength, that how many users can login and use database at same time. waht is the maximum size of table and maximu rows in table. what are the security risks and how can i overcome on security risks. and how can i …