This article states that If your site is run on a shared Web server, be aware that any session variables can easily be viewed by any other users on the same server. On a larger host like GoDaddy, are there really no protections in place against this? Could it really be that easy? If it is that easy, where are the session vars...
Hi, It keeps running in my mind the last couple of days, but I read some articles about how to make your PHP sessions more secure. Almost all of these articles say that you need to save the useragent in the session WITH an additional salt. Something like this: $fingerprint = md5('SECRET-SALT'.$_SERVER['HTTP_USER_AGENT']); The salt wo...
Hi basically I am lost in apples documentation and not sure where to start on this. I need to record the audio from applications running on my system, similar to audio hijack and wiretap studio pro, but I am unsure where to start with the audio captuer. I see reference to quicktime capture documentation but it is not clear how to achei...
Hello. I have something like the following. A main page has jquery tabs on it. It loads content for the tabs from other pages. Using the hijack plugin, the content loads correctly for me. Now, on the loaded tab, I have a form (page2.html below). On here, when I hit the link, I would like the new page as directed by the action (edit...
I want to access the audio from any application in Mac OS X, just like AirFoil does. But I can't understand how to do it... AirFoil requires a restart of the application. This might be a clue to how it does it... What is it that require the app to restart? Is it to hijick it, or to gain rights in some way to communicate with the app? I'...
Hi, I've developed an Outlook 2003 plug-in that attaches itself to a message compose window. It's a VSTO plug-in written in C# on .Net 3.0 using VS 2008. Visually, the plug-in adds an extra rich text box and a few other controls(mostly text formatting for the Rich Text Box) to the bottom of the Outlook compose window. The issue th...
Of course I can always edit WordPress' .htaccess file, but that would kind of make my WP plugin a little non-standard. Instead, what is the way to hijack a URL via a custom plugin in WordPress? For instance, let's say I want to build an elaborate product catalog that could be installed in WordPress as a plugin. Once activated, you could...
Ok guys. My website keeps getting hijacked by searchportal.information it looks like they are using an iframe script to do it. here is the script: http://searchportal.information.com/?a_id=47368&domainname=www.(mysite).com how do i prevent them from doing this? ...
Our application starts by scraping a web page using WatiN (like Selenium or WatiR) on a server somewhere. Scraping concludes, and I want a real user in another location to take over the session that WatiN started. Because of security on the web site we are accessing, I probably need to have a proxy that holds the html and cookies for res...
I'm doing a simple shopping cart for a small site. I plan to store cart items as well as logged in user_id in session variables. to make things a little more secure, I thought I'd do this: sha1() the user_id before storing it in the session. Also sha1() and store the http_user_agent var with some salt, and check this along with the...
I had a discussion in another thread, and found out that class methods takes precedence over extension methods with the same name and parameters. This is good as extension methods won't hijack methods, but assume you have added some extension methods to a third party library: public class ThirdParty { } public static class ThirdPartyEx...
Is there a way to "hijack" a file in subversion like there is in ClearCase. Googling so far has not given me a definitive answer. (For non ClearCase users) Hijacking a file means temporarily removing it from version control. ...
We’re using jquery.autocomplete plugin to help autocomplete usernames on a twitter client. Whenever the user types the @ symbol, the script is triggered to help complete the desired username. Problem is that, even when the @ symbol hasn’t been typed in at all, the UP and DOWN arrow keys (used to navigate the list of potential usernames ...
Hi guys. Lets just consider the trust that the server have with the user. Session fixation: To avoid the fixation I use "session_regenerate_id ()" ONLY in authentication (login.php) Session sidejacking: SSL encryption for the entire site. Am I safe ? Thanks. ...
Hi, I have this application that I haven't created and I don't have the source for. But it's really handy in handling and recording the time I've used on different projects. But it has this annoying pop-up that comes up that contains a window and some debug text I believe. It wasn't done by a professional, it was just a hobby project. Ev...