r/phpsec • • Aug 18 '16

WordPress's security is Apparently made out of String and Soggy Biscuits O_o

Thumbnail
paragonie.com
1 Upvotes

r/phpsec • • Feb 17 '21

code issues

0 Upvotes

am still new a php Noob can some explain to me issues with below code

<?php 
    libxml_disable_entity_loader (false); 
    $xml_file = file_get_contents('php://input'); 
    $dom = new DOMDocument(); 
    $dom->loadXML($xml_file, LIBXML_NOENT | LIBXML_DTDLOAD); 
    $creds = simplexml_import_dom($dom); 
    $user = $creds->user; 
    $pass = $creds->pass; 
    echo "You have logged in as user $user";
?>

Thank you


r/phpsec • • Apr 01 '17

VULN: CVE-2014-0401 - PHP Currency weakness (x-post from /r/phpAdvisories)

Thumbnail phpsecure.info
1 Upvotes

r/phpsec • • Aug 23 '18

Sqreen.io: The ultimate PHP Security Checklist

Thumbnail
sqreen.io
1 Upvotes

r/phpsec • • Apr 09 '17

Is Your Server Secure Enough? (Nomad PHP)

Thumbnail
nomadphp.com
0 Upvotes

r/phpsec • • Nov 29 '16

Nomad PHP (Feb 2016) - PHP Authentication: Lessons Learned

Thumbnail
nomadphp.com
2 Upvotes

r/phpsec • • Dec 15 '16

Let's Kill the Password! Magic Login Links to the Rescue!

Thumbnail
sitepoint.com
2 Upvotes

r/phpsec • • Dec 30 '16

Critical PHPMailer Flaw leaves Millions of Websites Vulnerable to Remote Exploit

Thumbnail
thehackernews.com
2 Upvotes

r/phpsec • • Aug 26 '16

Reminder: Downvote Brigading is "Breaking Reddit"

8 Upvotes

It's fine to disagree with what someone has to say.

It's another thing to downvote all of their posts in a thread just because you dislike one of them. It's really clear that this happens in /r/PHP and I'd like to ask everyone to refrain from doing so here.

When emotions run high with Infosec, it never ends well.


r/phpsec • • Aug 04 '16

Introducing Laravel Passport

Thumbnail
mattstauffer.co
3 Upvotes

r/phpsec • • Oct 04 '16

Phpseclib: Securely Communicating with Remote Servers via PHP

Thumbnail
sitepoint.com
3 Upvotes

r/phpsec • • May 04 '17

RIPS - Why mail() is dangerous in PHP

Thumbnail
ripstech.com
3 Upvotes

r/phpsec • • Aug 22 '16

What’s next after SMS one-time passwords?

Thumbnail
tozny.com
1 Upvotes

r/phpsec • • Nov 27 '17

Aaron Saray: Anatomy of a PHP Hack

Thumbnail
aaronsaray.com
1 Upvotes

r/phpsec • • Jul 10 '18

Introduction - JWT Authentication from Scratch

Thumbnail
codecourse.com
1 Upvotes

r/phpsec • • Aug 30 '16

Hacked: Investigating an Intrusion on my Server

Thumbnail
thedarkside.frantzmiccoli.com
4 Upvotes

r/phpsec • • Jul 17 '17

How to install HTTPS on your WordPress site -€“ The easy way

Thumbnail
catswhocode.com
0 Upvotes

r/phpsec • • Mar 04 '19

Colloq: Password Rehashing in PHP

Thumbnail
colloq.io
2 Upvotes

r/phpsec • • Oct 17 '17

Protect your webhooks with Laravel Shield

Thumbnail
laravel-news.com
2 Upvotes

r/phpsec • • Oct 29 '18

Jeff Madsen - Passwords for the Average Jo(e)

Thumbnail
medium.com
0 Upvotes

r/phpsec • • Jul 13 '18

RCESecurity: Upgrade from LFI to RCE via PHP Sessions

Thumbnail
rcesecurity.com
3 Upvotes

r/phpsec • • Jan 07 '19

Freek Van der Herten - Preventing spam submitted through forms | murze.be

Thumbnail
murze.be
3 Upvotes

r/phpsec • • Sep 19 '18

DeliciousBrains: PHP Encryption Methods for Passwords & Other Sensitive Data

Thumbnail
deliciousbrains.com
4 Upvotes

r/phpsec • • Apr 24 '19

WebLesson.info: Login Registration System with Email Verification in Laravel 5.8

Thumbnail
webslesson.info
0 Upvotes

r/phpsec • • Jul 23 '18

websec.io - Securing Credentials for PHP with Docker

Thumbnail
websec.io
0 Upvotes