Re: Found security expliot in port phpBB 2.0.8 FreeBSD4.10

From: Brett Glass (brett_at_lariat.org)
Date: 12/29/04

  • Next message: Peter C. Lai: "Re: Found security expliot in port phpBB 2.0.8 FreeBSD4.10" 
    Date: Wed, 29 Dec 2004 10:47:33 -0700
To: "Jerry Bell" <jerry@syslog.org>, "Sean Countryman" <sean@rackoperations.com>

    At 07:30 AM 12/29/2004, Jerry Bell wrote:
      
    >At the end of the day, PHP isn't really the problem. The problem is that
    >people are not taking the time to learn how to code securely given the
    >tool they are using.

    In this case, the problem is really not the language but the Web itself.
    Preserving the state of an ongoing transaction in a secure and tamper-proof
    manner is a thorny problem regardless of language -- and it has gotten
    harder because the abuse of cookies to invade privacy has caused so many
    people to restrict them or turn them off. Absent a default solution that's
    already been honed for security, programmers will tend to cut corners or
    will have to learn security basics from scratch -- the hard way.

    --Brett Glass

    _______________________________________________
    freebsd-security@freebsd.org mailing list
    http://lists.freebsd.org/mailman/listinfo/freebsd-security
    To unsubscribe, send any mail to "freebsd-security-unsubscribe@freebsd.org"

  • Next message: Peter C. Lai: "Re: Found security expliot in port phpBB 2.0.8 FreeBSD4.10"

    Relevant Pages

    • Re: Breaking backwards compatibility - good or bad?
      ... coming and are needed to anything really big and useful in PHP. ... command or statement in the language that is going to be made invalid ... The PHP team tries very hard not to break CORRECT scripts. ... "Introducing case-sensitivity for variables and functions names has ...
      (comp.lang.php)
    • Re: Case sensitivity in programming languages.
      ... the language. ... And these conventions take advantage of case sensitivity. ... In PHP it can be any of those things. ... group of programmers who want t force their stupid ideas onto others. ...
      (comp.lang.php)
    • Re: Case sensitivity in programming languages.
      ... Is any language issued with a set of function names in different ... You get a warning if you reference an undeclared variable in PHP if your ... In something like PHP we could generate a convention ... The ability to have 3 different functions called readfile(), ...
      (comp.lang.php)
    • Re: Python gets macros - now XML does too
      ... >>final target language of choice. ... Currently PHP, Java, and Perl are ... > What you called level 2 metaprogramming is possible in Lisp, ... of business in 1994 and that marked the end of the Amiga computers era, ...
      (comp.lang.lisp)
    • Re: Websites 101
      ... Some things have changed in PHP already thoug. ... but people who understand very little about programming ... The more similar a language is to an other, ... PHP borrows a lot from Perl, ...
      (alt.internet.search-engines)