-
Recent Posts
- Nieuwsuur op bezoek: hackers hebben ingebroken in buitenlandse energiecentrales
- WiFi eavesdropping demonstration in Smell of Data documentary
- SHA2017 talk: How the Dutch elections could be hacked for the last 26 years
- Brandweercommandowagen gehackt op hackersfestival SHA2017
- Wonen op postcode 1234AB is een bureaucratische hel vol neppost
Recent Comments
- Joris van de Vis (via Twitter) on Interview in het VNSG-magazine over SAP security
- Arnoud on Interview in het VNSG-magazine over SAP security
- Sijmen Ruwhof on How to hack the upcoming Dutch elections – and how hackers could have hacked all Dutch elections since 2009
- Anonymous on How to hack the upcoming Dutch elections – and how hackers could have hacked all Dutch elections since 2009
- Stimmenzählung in den Niederlanden: Lieber mit Taschenrechner – Avada Classic on How to hack the upcoming Dutch elections – and how hackers could have hacked all Dutch elections since 2009
Archives
- September 2017
- August 2017
- July 2017
- June 2017
- May 2017
- April 2017
- March 2017
- February 2017
- January 2017
- December 2016
- October 2016
- July 2016
- June 2016
- May 2016
- March 2016
- February 2016
- January 2016
- December 2015
- November 2015
- October 2015
- July 2015
- March 2015
- February 2015
- November 2014
- September 2014
- September 2012
- July 2012
- May 2012
- March 2012
- October 2011
- September 2011
- August 2011
- July 2011
- June 2011
- May 2011
- February 2011
- January 2011
- December 2010
- September 2010
- April 2010
- March 2010
- August 2006
- January 2005
- July 2004
- January 1970
Categories
- analysis
- Apple
- article
- browser security
- bug
- computer worm
- credit card
- cross site scripting
- cyber crime
- cyber terrorisme
- cyber warfare
- data leakage
- discussion
- drive-by
- e-voting
- hacking
- ICT
- interview
- jargon
- legal
- magazine
- media
- menu
- online banking
- password
- pentesting
- phishing
- PHP
- PHP security
- podcast
- presentation
- privacy
- process improvement
- radio
- ransomware
- responsible disclosure
- SAP
- scoping
- search engine optimization
- security
- security assessment
- security audit
- security awareness
- security vulnerability
- SNS Bank
- software development
- test
- tv
- Uncategorized
- vulnerability management
- w3c
- website
- website security
- WiFi
- wiretapping
- workshop
- zero day
Meta
Category Archives: PHP
Cross-site scripting in millions of web sites
In August 2014 I found a severe cross-site scripting security vulnerability in the latest version (1.13.0) of the ‘jQuery Validation Plugin‘ during a security penetration test for a customer. This jQuery plugin which adds easy form validation functionality to a web site, is … Continue reading
Posted in cross site scripting, Google, PHP, responsible disclosure
62 Comments
“Implicaties applicatieconfiguratie opslaan in PHP constanten?”
Hieronder mijn antwoord dat ik voor iemand geschreven heb die mij de volgende vraag stelde: “Is het wijs om de applicatieconfiguratie op te slaan in constanten, in plaats van in een array?” Het voordeel van het opslaan van waardes in … Continue reading
Posted in PHP, PHP security
Comments Off on “Implicaties applicatieconfiguratie opslaan in PHP constanten?”
Setting cookies in PHP
My experience with setting cookies with PHP, a must read for every developer that uses Windows XP and doesn’t want to spend his time debugging cookies. If you’re using Windows XP with Internet Explorer and have a local web server … Continue reading