Tagged Questions
0
votes
3answers
76 views
Is it safe to put an ID (will insert in DB) into a hidden input?
Here's the summary of my code:
My website basically just loops the content of all the rows of a certain table; however, at times, I'll need to obtain an individual ID from a certain row. The hidden ...
2
votes
3answers
37 views
How can I secure user submitted HTML markup?
Before I start I'd like to say I have read similar questions here but I don't think it really answers the question: Show HTML user input, security issue and Security risks from user-submitted HTML
I ...
1
vote
1answer
46 views
What are precautions you should take when you allow users to edit HTML and CSS on your website?
Tumblr is really impressive in the sense that it allows users to customize their profiles and such. You're allowed to edit the HTML and CSS of your profile.
This is something I want to apply to my ...
-1
votes
0answers
57 views
Secure an opensource website [closed]
I would like to know how people develop and protect website when the source code is open source. I mean, every body can read and test the code and try to hack the website in local...
Which type of ...
0
votes
1answer
15 views
MVC Validate Sensitive information like ProjectId,UserIs etc?
I am creating one application using ASP.NET MVC 4.5/5.4.
i had model
public class user
{
prop string userId{ get; set;}
prop string email{ get; set;}
}
i am use it to view and taking userId in ...
0
votes
3answers
119 views
PHP: Website getting hacked weirdly [duplicate]
I'm currently developing a web interface in PHP/HTML for a Database course project.
Basically, there is an input field :
<form action="<?php echo $_SERVER['PHP_SELF']; ?>" method="POST">
...
0
votes
0answers
16 views
CDNs for static HTML
Would it make sense to use CDN's to host your pages too? E.g., if your website is all static HTML...
Initially, it seems there could be a few problems with this approach:
1) Browsers will display ...
0
votes
1answer
19 views
Analyze page to see which resource is not transfered in https
I'm trying to use SSL for all the traffic of my website: https://alireza-noori.com. After a lot of struggle I managed to install certificate and make the HTTPS work. However, whenever I visit my ...
0
votes
1answer
61 views
Cross domain authentication across an iframe without login
I want the user to be able to submit and render untrusted HTML within an application on say domain example1.com. In order to prevent malicious XSS from capturing the user's cookies the idea was to ...
1
vote
1answer
66 views
How chrome executable autorun?
So, on http://google.com/chrome/ you can download chrome.
You chose chrome channel and accept EULA.
Web installer starts download and after few seconds autolaunch itself and immediatly starts ...
-1
votes
1answer
51 views
Captcha vs Hidden Field [closed]
I'm been recently wondering if the complexity of a decent captcha was acceptable for a simple website. I wonder if only using an input field with a hidden attribute in CSS would be sufficient for a ...
1
vote
1answer
69 views
Prevent others from calling your JSON web service
Let's say I have some code that creates an HTML page with a JSON service call.
How can I prevent others from copying and pasting the source code, calling the service and getting the result set for ...
0
votes
1answer
22 views
Signing an iframe form to validate its sender
I have:
A form on static page.
Two sites (A - the site, where I need to insert this form within iframe, B - the site, where I need to verify form and send answer to back to iframe).
I need some ...
-3
votes
1answer
43 views
What is this umsdataelement doing in my browser? [closed]
I've inherited a heavily modified Firefox (lots of Add-ons) from the previous occupant of this desk.
In some browser windows (developing in PHP on localhost), an unexpected element has appeared at ...
2
votes
1answer
46 views
PHP cookies and member security
I've created a forum which uses a PHP session when logged in to determine the user id, and cookies for log-term login.
I suppose I have two questions:
Is this the best/securest method?
Cookies can ...
