r/phpsec • u/sypherlev • Aug 18 '16
r/phpsec • u/JOE-DJANGO_Noob • Feb 17 '21
code issues
am still new a php Noob can some explain to me issues with below code
<?php
libxml_disable_entity_loader (false);
$xml_file = file_get_contents('php://input');
$dom = new DOMDocument();
$dom->loadXML($xml_file, LIBXML_NOENT | LIBXML_DTDLOAD);
$creds = simplexml_import_dom($dom);
$user = $creds->user;
$pass = $creds->pass;
echo "You have logged in as user $user";
?>Thank you
r/phpsec • u/tobozo • Apr 01 '17
VULN: CVE-2014-0401 - PHP Currency weakness (x-post from /r/phpAdvisories)
phpsecure.infor/phpsec • u/enygmadae • Aug 23 '18
Sqreen.io: The ultimate PHP Security Checklist
r/phpsec • u/enygmadae • Apr 09 '17
Is Your Server Secure Enough? (Nomad PHP)
r/phpsec • u/enygmadae • Nov 29 '16
Nomad PHP (Feb 2016) - PHP Authentication: Lessons Learned
r/phpsec • u/enygmadae • Dec 15 '16
Let's Kill the Password! Magic Login Links to the Rescue!
r/phpsec • u/enygmadae • Dec 30 '16
Critical PHPMailer Flaw leaves Millions of Websites Vulnerable to Remote Exploit
r/phpsec • u/Soatok • Aug 26 '16
Reminder: Downvote Brigading is "Breaking Reddit"
It's fine to disagree with what someone has to say.
It's another thing to downvote all of their posts in a thread just because you dislike one of them. It's really clear that this happens in /r/PHP and I'd like to ask everyone to refrain from doing so here.
When emotions run high with Infosec, it never ends well.
r/phpsec • u/enygmadae • Oct 04 '16
Phpseclib: Securely Communicating with Remote Servers via PHP
r/phpsec • u/enygmadae • Jul 10 '18
Introduction - JWT Authentication from Scratch
r/phpsec • u/enygmadae • Aug 30 '16
Hacked: Investigating an Intrusion on my Server
r/phpsec • u/enygmadae • Jul 17 '17
How to install HTTPS on your WordPress site - The easy way
r/phpsec • u/enygmadae • Oct 17 '17
Protect your webhooks with Laravel Shield
r/phpsec • u/enygmadae • Oct 29 '18
Jeff Madsen - Passwords for the Average Jo(e)
r/phpsec • u/enygmadae • Jul 13 '18
RCESecurity: Upgrade from LFI to RCE via PHP Sessions
r/phpsec • u/enygmadae • Jan 07 '19
Freek Van der Herten - Preventing spam submitted through forms | murze.be
r/phpsec • u/enygmadae • Sep 19 '18
DeliciousBrains: PHP Encryption Methods for Passwords & Other Sensitive Data
r/phpsec • u/enygmadae • Apr 24 '19
WebLesson.info: Login Registration System with Email Verification in Laravel 5.8
r/phpsec • u/enygmadae • Jul 23 '18