Re: Found security expliot in port phpBB 2.0.8 FreeBSD4.10

From: Brett Glass (brett_at_lariat.org)
Date: 12/29/04

  • Next message: Peter C. Lai: "Re: Found security expliot in port phpBB 2.0.8 FreeBSD4.10" 
    Date: Wed, 29 Dec 2004 10:47:33 -0700
To: "Jerry Bell" <jerry@syslog.org>, "Sean Countryman" <sean@rackoperations.com>

    At 07:30 AM 12/29/2004, Jerry Bell wrote:
      
    >At the end of the day, PHP isn't really the problem. The problem is that
    >people are not taking the time to learn how to code securely given the
    >tool they are using.

    In this case, the problem is really not the language but the Web itself.
    Preserving the state of an ongoing transaction in a secure and tamper-proof
    manner is a thorny problem regardless of language -- and it has gotten
    harder because the abuse of cookies to invade privacy has caused so many
    people to restrict them or turn them off. Absent a default solution that's
    already been honed for security, programmers will tend to cut corners or
    will have to learn security basics from scratch -- the hard way.

    --Brett Glass

    _______________________________________________
    freebsd-security@freebsd.org mailing list
    http://lists.freebsd.org/mailman/listinfo/freebsd-security
    To unsubscribe, send any mail to "freebsd-security-unsubscribe@freebsd.org"

  • Next message: Peter C. Lai: "Re: Found security expliot in port phpBB 2.0.8 FreeBSD4.10"

    Relevant Pages

    • Re: Breaking backwards compatibility - good or bad?
      ... coming and are needed to anything really big and useful in PHP. ... command or statement in the language that is going to be made invalid ... The PHP team tries very hard not to break CORRECT scripts. ... "Introducing case-sensitivity for variables and functions names has ...
      (comp.lang.php)
    • Re: Case sensitivity in programming languages.
      ... the language. ... And these conventions take advantage of case sensitivity. ... In PHP it can be any of those things. ... group of programmers who want t force their stupid ideas onto others. ...
      (comp.lang.php)
    • Re: A Lot of Questions from a Noob
      ... OOP is a language paradigm that is not specific to ... I Google'd for an introduction to object-oriented programming, ... Watch out for the die-hard Perl fanbois: ... PHP 5 OOP has come a long way from PHP 4. ...
      (comp.lang.php)
    • Re: Wordpress Port
      ... I think Ruby is also generally useful. ... easier to work with than Perl. ... PHP was obviously designed ... primarily as a procedural language, so it's sort of appropriate for ...
      (comp.lang.ruby)
    • Re: Case sensitivity in programming languages.
      ... Is any language issued with a set of function names in different ... You get a warning if you reference an undeclared variable in PHP if your ... In something like PHP we could generate a convention ... The ability to have 3 different functions called readfile(), ...
      (comp.lang.php)