quote:

Originally posted by FuzzQi Never hurts to over prepare for that! I would add on a regex with str_replace() to filter out things explicitly.You can also send $_POST with AJAX, but your best bet is to validate all of the variables sent on the processing page.

Good idea! I had never thought of using str_replace() to change unwanted commands... I really like it

And I tried to use $_POST instead of $_GET, but I keep doing something wrong and the functions always freeze, so I eventually settled for the more practical method...

quote:

Originally posted by FuzzQi Another one that I do: have 2 id fields in your database tables, the first one is ID as an integer, the second is a hash of that ID using a message digest like md5() plus a salt (e.g. $hash_id=md5("owiujnaeha0p8we0fafe".$id); )

So I'd have the first as the primary key and the second as a confirmation that the ID is correct?

Hmm... me gusta

quote:

Originally posted by *** ...

quote:

Originally posted by JEO Learn PDO (waiting for a pedo joke), that's PHP data objects. http://www.phpro.org/tutorials/Intr...to-PHP-PDO.html

Interesting... I decided to read up on it a bit more and, if I understood correctly, it makes it nearly impossible to add anything that won't become a value in the database? Or did I get it wrong?

___________________
Indiana Clones Upcoming Sets
[ I May Upload Something Someday ]

quote:

Originally posted by *** 1. Don't connect your database to the internet. 2. Use an interface that is non standard. 3. Have a offline backup for your secure system in lead and a faraday cage buried somewhere and possibly encased in concrete. with land mines and IED's and lethal radioactive material nearby. Saying do not enter, No solicitations, Trespassers will be undertaken. 4. You want to encase all your systems in farraday mesh. Make sure you have have explosives or radioactive materials - combined with fletchettes punjii sticks. Consider posting lots of porn on the walls too just to throw a would be attacker off guard. Throwing in a sex doll in the same room with the server may throw off the average script kiddie. 5. Don't use windows, or mac, or any operating system that is known. 6. Use your own File System, not a known file system. 7. Do not use any standard equipment, consider 9 bit servers and trinary systems operated by gears containing oscillated crystals rather than magnetics. 8. Assemble pages rather than have them ready made or standardized. 9. Do not take any inputs other than your allowed inputs close off all other interface types. 10. Serve your data from major servers that are not succeptable to ddos attacks. 11. Ban all IP's of non subscribed people to your server access. require a sign up with a specific IP. create a proxy with some other method of login such as facial recognition or subscribe by MAC. These are some ideas. The key is to build everything from the ground up...read abit about TEMPEST .. you can't use an electromagnetic system if you want to avoid being hacked. You can only defend if you have enough resistance to protect against an external EW takeover of your system. All devices can be controlled externally via EW tech Realize the internet is an EM system so it is always succeptable to takeover via EW. The only resistance is EW hardening via tempest methodologies and non standards based engineering. example don't use the most efficient systems. Do not program in english and bloat your system, also don't use regular math and make your own os that implements symbolic visual programming in a non standard ex. the trinary or quad or quantum based operating environment, that is mechanical and is fluid rather than a static system.

legend

___________________
Fortuna Favet Fortibus.

Get a Mac they're like impossible to hack and they never ever get viruses either.

___________________

quote:

Originally posted by OrangestO This isn't about physics, this is about waves.

quote:

Originally posted by srussell0018 Get a Mac they're like impossible to hack

My machete says otherwise

___________________
Indiana Clones Upcoming Sets
[ I May Upload Something Someday ]

quote:

Originally posted by Lira Interesting... I decided to read up on it a bit more and, if I understood correctly, it makes it nearly impossible to add anything that won't become a value in the database? Or did I get it wrong?

Well, I'm not 100 % familiar with it myself (yet), but you'll save yourself from all that escaping stuff etc. with preparing your statements in pdo, plus



it supports 12 different drivers!

Really it's just something some pros told me when I started, so I never got to mysqli in the first place.

the vocals in the intro will guide you lira.

Haha, I'm going to give it a listen at home, Jay!

quote:

Originally posted by JEO Well, I'm not 100 % familiar with it myself (yet), but you'll save yourself from all that escaping stuff etc. with preparing your statements in pdo, plus it supports 12 different drivers! Really it's just something some pros told me when I started, so I never got to mysqli in the first place.

I've been looking into it since you last posted this, by the way! Thanks, JEO

quote:

Originally posted by *** 7. Do not use any standard equipment, consider 9 bit servers and trinary systems operated by gears containing oscillated crystals rather than magnetics.

This post is absolutely brilliant. Hats off to you, sir.

___________________

Set Archive | TA DJ Challenge