Problem I need you help with my php session class. I can not understand, the class implements adequate work with […]
Category: Security
Express.js functions to start session, authenticate user, perform ping, search for user, reset password, and import product XML
Problem I wrote the below code which contains the following functions: establish session with the user, determine if the user […]
Need to pass cookie information to a child iFrame – Are there any security concerns?
Problem I have a child iframe in my page that will load content from a different web application in a […]
WordPress $wpdb->row Query Check
Problem Looking at $wpdb class, I found get_row, and I am unsure if the function automatically prepares the query. I […]
Simple bash script creates apache2 virtualhost config for subdomain
Problem Simple bash script to create apache2 virtualhost for localhost. Can be used for public subdomains on developer server with […]
Validate a password mostly to NIST-2017 standards
Problem I have an application that needs to validate user passwords to a very reasonable custom validator, which is heavily […]
Symmetric encryption/decryption routine using AES
Problem The following is a symmetric encryption/decryption routine using AES in GCM mode. This code operates in the application layer, […]
Encrypt a byte array
Problem This code is a Frankenstein. I found ten examples done in ten different ways and my requirements were slightly […]
Password generator and hashing
Problem To generate a password, I generate a key using RNGCryptoServiceProvider. The key is 9 alphanumeric characters long into which […]
PHP upload script might be vulnerable
Problem I have written a basic PHP upload script a few years ago and recently I discovered some phishing html […]