Tag Archives: segurança
BCRYPT and Random SALTS together in database
I am in the process of upgrading the security level of my site.
When researching for the best method to store passwords i found the BCRYPT option in PHP 5.3. I have implemented this function to use a static SALT,… Continue lendo
Check if uploaded file is of a insecure filetype in php
I have an file upload form and need to run a check on the file uploaded to ensure it isn’t anything that might potentially cause problems on the server (ie: executables). The files will primarily be images, but I will… Continue lendo
A safe random number, such as an integer from /dev/random, for Windows platform?
Na minha aplicação, I require a function to generate (unpredictably) random values that differ each time when called such as inside a fast loop.
On Linux platforms which is the platform I will release my script (of which shall be… Continue lendo
Is there anything wrong with my RESTful implementation?
I have a server application that is providing a Restful API for clients that are written by me. This is what I am doing so far:
1). Provide a login REST URL that allows client to enter user/password (over SSL)… Continue lendo
Integrate CRM or Webapp behind Joomla site
Im trying to figure out how to do this but i cant seem to find a solution.
Ive writen a crm/client management software with php/sql and java.
It works ok with it’s own database etc and it’s written from scratch,… Continue lendo
Destruir Sessão PHP
There are lots of pages on stackoverflow about destorying session. Trust me, I have been reading them all and I came across this: Why does my session remain?
My question is simple, is it really true that I need to… Continue lendo
Yii Using mongo DB and MySQL at the same time
I’m staring to build a system for working with native languages, tags and such data in Yii Framework.
I already choose MongoDB for storing my data as I think it feets nicelly and will get better performance with less costs… Continue lendo
Ajax Segurança
We have a heavy Ajax dependent application. What are the good ways of making it sure that the request to server side scripts are not coming through standalone programs and are through an actual user sitting on a browser… Continue lendo
Secure PHP user authentication using OpenID
My goal is a secure login in system such as stackoverflow uses. I am a newbie but as you have probably seen I have spent all day looking up stackoverflow articles on security. As a result of this research I… Continue lendo
What does it mean to escape a string?
I was reading
Eu olhei:
Inserting Escape Characters , ,
Cant escape a string with addcslashes() ,
,
what does mysql_real_escape_string() really do? ,
,
MySQL_real_escape_string not adding slashes? ,
remove escape sequences from string in php I… Continue lendo





