[security] Forum Topics

Hi, I see some website URLs have hash values attached to them. Is this for security reasons? If so, how do we benefit from that approach? example: h-t-t-p://w-w-w.mysite.com/forums/search/results/3400faebf7f6e0b549751ca029026a61/ Thanks

Hi there, so my site has a public side and an admin side, the admin side which requires a login. The used id is stored in a session variable to limit access to certain features based on the number. In the admin side a user and show or hide pages …

System restore doesn't work, AVG is suppressed, can't download Spybot, but thankfully HijackThis downloaded. Here's my log file: Scan saved at 7:45:01 AM, on 11/22/2008 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v8.00 (8.00.6001.18241) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe C:\WINDOWS\Explorer.EXE …

Hello people. I am a security analyst from a computer security solution company. I am handling a project where an entreprise of 50 to 100 employee which requires an Active Directory to maintain their staff in the LAN network. So my team and I have deplyoed an active directory for …

HI everybody, I have this error.i created a user login page using sfguard user.(symfony framework) but i include php.ini Windows: "\path1;\path2" ;include_path = ".;c:\php5.3.8\PEAR" but still same error was comming.what is the problem.plz anybody help me. Fatal error: require() [function.require]: Failed opening required '/' (include_path='.;C:\php\pear') in C:\wamp\www\public_html\lib\vendor\symfony\lib\view\sfPHPView.class.php on line 75

we can use $_GET method to pass info via url but it shows the info in url like <a href =profile.php?id=$user>click here</a> and in profile.php?id=$user , we can access username via $username=$_GET['id']; is there any safer method to achieve because i don;t want to show the info passed in url. …

hi any body knows a way to secury laptop from theft apart from lock.im not locking for software but ways to prevent the laptop from beeing taken away.

Hi I am a bit stuck on how to close a security issue. Basically if someone is looking at their profile and wants to edit it the URL will show the id of the user. Currently anyone can just change that number and have access to viewing and changing another …

Below is a part of an experiement. I am trying to mprotect the whole of the stack area but mprotect needs page aligned space. I can get the address of the current pointer using ucontext.uc_mcontext.gregs[REG_ESP] . But how do I get the page-size aligned address to use in the mprotect …

Please help to me draw a use case diagram for this scenario Gifts Online provides online purchasing facilities so guests who have been invited to an occasion can select gifts from lists that have been prepared by the host(s) of the occasions. This will include ordering, provision of purchasing facilities, …

I'm making a website and of course want to incorporate memberships and logins, etc and while I understand the theoretical application of salting and hashing a user-inputted password to save the encrypted pass in my database, I'm not sure on the approach... What I would do is get the hashCode …

I am not sure if anyone knows of a program that does fingerprint and face reconition. I would like it to require both face and fingerprint to login. Maybe if so many failed attemps it can shut off the computer as well. But I also need a back door like …

Hi i am flash game developer and will protect my games from decompilers please help me. best regards.

hi everyone .. i want to do a full-fledged final year project on security in VANETs .. i just cant get any jumpstart i need help urgently thnx :)

Hi all, I need a detailed explanation(PDF or video) explaining how I can control a specific user account capabilities, limitations from an administrator account? I want to know how to do it in Vista, XP and Windows 7. I have some capabilities in mind to configure giving a user the …

Hello, all. I am doing a project, which supports users such as Administrators, teachers and students. Since I will not always be available when they are registering, I want a user to create for themselves an account. However, the challenge is that, I do not want a user to register …

Hi , I developed an application which checks mail(gmail) all the time and alerts me whenever new mail has come. In short its a email notifier or email alerter. The application uses IMAP protocol .The application opens the connection once and it continously checks whether a new mail has come. …

I am wanting to set up a home server using an old computer, after doing some costs it would work out considerably cheaper than using a hosting service, and although less reliable I feel it would be some good and valuable experience. I have installed Ubuntu server edition onto my …

hi dear adviser..how can i implement a strong (WEP) tool that can hide thoroghly my IP frames for my wireless laptop..by the way which is the best download tool to secure my damned wireless devise

Hi, we're not able to connect to the internet with a desktop that was recently infected. After cleaning with multiple runs of MBAM and ComboFix, PC is showing a connection and strong signal with our wireless router, but packet exchange is almost nil. All of the installed browsers (Chrome, FF, …

how to reset the existing password(topsecret)with a new password by using the "replace" keyword in the below code shown [CODE] Public Class Form1 Private Sub Form1_Load(ByVal sender As System.Object, ByVal e As System.EventArgs) Handles MyBase.Load End Sub Private Sub Button1_Click(ByVal sender As System.Object, ByVal e As System.EventArgs) Handles Button2.Click System.Diagnostics.Process.Start("chrome.exe") …

hi, i have a system ans it is that users logs in with username and password .. and this is a risk since users can log in with others account.. now as a mitigation(avoid the risk) i listed that users can log in using finger print. now i have to …

Hello! i wanna to create a game that will use a mdb database file to store things and upload them while the gema will need them the thing is i dont want that the player could touch the file and easily cnange things with access.. there is a way to …

Hi I am using web application. on my login button i have written this code [CODE]protected void btnlogin_Click(object sender, EventArgs e) { //sql connection SqlConnection cnn = new SqlConnection(); cnn.ConnectionString = "Server=HOME-PC;Database=kandivalideal;Trusted_Connection=True;"; cnn.Open(); SqlCommand cmd = new SqlCommand("select mobileno, password from register where mobileno='"+txtmoblie.Text +"'and password='"+txtpassword.Text+"'",cnn); cmd.Connection = cnn; SqlDataReader …

I need a little help architecting a process that is a little beyond my skill set so if I could get a little help in how to approach this, I would appreciate it. Basically: BigBox Corporation has 15,000 employees in multiple countries. They want to build a communications system consisting …

Hello people. Im having a problem in my coding. I am doing a username and password application (sumtthing like a password keeper). So I have created the interface and i integrated vb 2008 with sql server 2008. So the adding of account and password all went fine. I have applied …

Ok i am running an apache server , on my window;s xp. For some reason i when i make a .htaccess file and put it into my www - dir its doesnt promt for a password or anything.! This is what i have for my .htaccess file AuthUserFile d:/www/.htpasswd AuthType …

Hi i had a several reseller account in the past and all one the time one of the go hacked and completely mess up my stuff an put stupid pictures instead of my site. I tried everything from changing user name and pass putting something longer but dont know how …

Hi everyone I have a more general computer my end goal of mivung into network security...I am currently MCSA,MCDST and MCP and CCNA and I have been working in it for over 3 years as a system administrator. By the end of next year I plan on having my EC …

Well i just want to say , dani web is a great forum to discuss IT but there is no area where we can discuss over security and secure coding. As many recent incidents proved that learning secure coding methods also necessary for programmers.... So.... Just a suggestion....................................... :)

Heres my situation: I have a securetunnel.com select package which gives me a "Secure Tunnel Private Network" (STPN)which encrypts my internet traffic keeping it from being viewed by my nosey isp. This STPN creates a new LAN connection in my network settings under control panel in Windows XP. It works …

I want to deny acess the directory & sub-directories of: mysite.com/uploads/ The uploads directory has sub-directories such as: mysite.com/uploads/35 & mysite.com/uploads/35/83 mysite.com/uploads/35/83_a I need to deny access to all of these. I can use the typical htaccess methods to do this except that new sub-directories get added all the time …

hi i just want my form to connect to a database. and also i want my password in my textbox to be encrpted . i want it to check in the database if password and user = true then display next form and the login form should be close whenever …

I want develop a asp.net C# web application. I put it in IIS. Now I want make some security function in address bar. For example, I don't want let user skip login page and key in path directly.

Hello, I wanted to use visual basic macro in excel to pull search results from Google. Since I am not very familiar with how visually basic macro works in excel, I found the following code from a tutorial online. [CODE]Const GOOGLE_WEBSERVER = "www.google.com" Function BuildSERPURL(ByVal term As String, ByVal start …

Greetings. I am curious about having the php config file in the web root. I am coding a site for a client and their web host has their php.ini file in the web root. Is that not a security risk? I have never heard of having it there before. I …

Hi Pals, I am using filezilla and i heard that it causes virus attacks on my website. I am also not saving password in site manager rather using quick connect. From some days m using core FTP. What do you guys think. What is secure way? Regards, Vibha

how can i prevent loading of some website from another user in my PC,mozilla firefox ???

If you have installed an antivirus and you are not sure if it is protecting your pc fully or not? just try this popular test.... open notepad just type in "[B]X5O!P%@AP[4\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H+H*[/B]" (without quotes "") save this with ".con" extension like: "eicar.con" scan this file with your antivirus if your antivirus …

Im trying to scp including password in one line... seems not working. [code] echo "pass" | scp --stdin source destination [/code] However this does work though [code]echo "newpass" | passwd --stdin user [/code] same concept, diff result. Any suggestion would be great. Thanks

hello every one..... i know that you may laugh at this but it is happening with me... i have a domain called lightc.com and the problem i'm facing that some users ( not all ) just few of them are telling me that they are just asking for lightc.com and …

Hi all, my client tested my Asp Website application by IBM Rational AppScan Sofware..during that i got follwing Security Report Issues [B]1.Temporary File Download/Alternate Version of File Detected[/B] Remediation Tasks : Remove old versions of files from the virtual directory How can i Remove old version of Virtual directory from …

hi all, i am new to php. i am developing a login where i compare encrepted password and set session to the user and login to the system. but I need mote to do with this. I need to know how to lock IP if a user try more than …

Hi I'm getting a few spammers bypassing certain form elements on my site which I attribute to them having javascript disabled. Is there any way of diplaying the <form></form> content if it's enabled and otherwise displaying a message saying "We are no longer taking registrations". I'm not too concerned about …

Hello, Which of these security software products, McAffee SecurityCenter, Norton 2011 or ZoneAlarm Extreme Security, should I buy? My subscription for SecurityCenter is almost up and I'm wondering if I should renew. SecurityCenter has been good, if a bit overzelous, in in eating nasty things, but I've heard reports that …

May I request there be a security forum(s) so that there be discussion on security issues Thanks!

Hello How do you doin I wantto know what this difference between $HTTP_POST_VARS['somevariable'] and $_POST['somevariable'] I read the first one is safer than the second one because the second one prevents hackers from hacking through the computer.. what computer is that?? And how is it safer??

I'm trying to create a simple members only section. With the following code, I'm able to log in and get redirected to a page (that simply says: "hello") if the login is correct. If I then copy the URL from the page to which I was redirected, open up IE, …

Hello, I have some dating sites and created htaccess file to block most of the IPS. However, they use proxy servers to come to my site. So, I have one question about that. How do I block visitors who use proxy servers to come to my sites? Thanks.

I would like some help with getting free virus and spy ware software to protect my desk top pc I run windows 7 could someone please send some links and recommed the best free software used but dont want any trials would like full versions thanks much!