Fresh PHP news, tutorials, tips and much more

Posts Tagged ‘security’

Multibyte Shell Command Escaping Bypass Vulnerability

Wednesday, May 7th, 2008

Sometimes PHP developers need execute some kind of shell commands. Sometimes these commands has user input so it is logical that there can be some security holes. To avoid such kind of security holes SecuriTeam published new article describing  some PHP build in functions:

In PHP there exist two functions to escape shell commands or arguments to shell commands that are used in PHP applications to protect against shell command injection vulnerabilities.

Post tagged with: , ,

Posted in Advanced | No Comments »

Use captcha without displaying it

Tuesday, May 6th, 2008

Most powerful weapon against spam bots is captcha in your forms. But captcha has one minus user is forced to write some ’stupid’ word from picture witch is often is hard to read. Vileworks blog introduced new way of using captcha.

What I wanted was to have the commenting feature protected against spam bots without having the innocent human users ruining their eyes on captcha like images, or complete any mathematical equation or any other additional question fields.

This method looks attractive but if it would be new way of protecting your forms?

Post tagged with: , , ,

Posted in Advanced | No Comments »