Questions tagged [security]

9

votes

4

answers

Checking if specific user has a role

asked 2009-12-02T15:41:10.580

31

votes

1

answers

Why same origin policy for XMLHttpRequest

security jsonp javascript-security

asked 2009-12-02T01:05:52.807

10

votes

6

answers

How to confirm SQL injection

sql sql-injection security

asked 2009-11-30T10:57:36.350

38

votes

20

answers

Cannot create SSPI context

sql sql-server security sspi

asked 2009-11-28T13:41:19.313

18

votes

2

answers

Does AntiForgeryToken in ASP.NET MVC prevent against all CSRF attacks?

asp.net-mvc ajax security csrf

asked 2009-11-26T09:15:11.560

13

votes

2

answers

What is best possible way of salting and storing salt?

security encryption cryptography passwords

asked 2009-11-18T01:24:37.310

19

votes

6

answers

MALICIOUS_CODE EI_EXPOSE_REP Medium

java security findbugs

asked 2009-11-14T00:40:10.493

10

votes

13

answers

Are sql injection attacks only a threat on a page that has a form?

sql security web-applications sql-injection

asked 2009-11-11T17:56:57.240

11

votes

2

answers

Entify Framework Inserts require Select permissions

.net security entity-framework linq-to-entities least-privilege

asked 2009-11-10T08:54:47.253

10

votes

5

answers

WCF service certificate and client side endpoint identity - why it doesn't work?

wcf security certificate

asked 2009-11-09T14:43:22.787

80

votes

6

answers

Salt Generation and open source software

security cryptography open-source salt-cryptography rainbowtable

asked 2009-10-29T17:00:59.493

9

votes

3

answers

Do you prefer to wrap JSON arrays in another JSON object or always require POST to prevent JSON Hijacking?

security json

asked 2009-10-24T09:42:14.013

13

votes

5

answers

cleaning $_POST variables

php security post variables

asked 2009-10-22T23:26:34.077

570

votes

8

answers

What is token-based authentication?

security authentication token http-token-authentication

asked 2009-10-20T04:56:40.237

40

votes

5

answers

How do I html-escape dangerous unsanitized input in jinja2?

python security escaping jinja2

asked 2009-10-12T20:00:49.320

46

votes

8

answers

Escaping strings for use in XML

python xml security escaping

asked 2009-10-10T00:51:10.653

10

votes

4

answers

How to prevent form replay/man-in-the-middle attack in PHP, csrf, xsrf

php security forms csrf

asked 2009-10-09T17:27:40.480

18

votes

6

answers

Is Quicksort a potential security risk?

algorithm security quicksort

asked 2009-10-06T18:00:53.300

29

votes

3

answers

Client Login - how to store credentials securely on client side?

security authentication

asked 2009-10-01T12:56:05.957

11

votes

1

answers

Difference between CookieStore Sessions and Encrypted Cookies in Ruby On Rails

ruby-on-rails security cookies session

asked 2009-09-25T17:04:52.420

193

votes

9

answers

PHP $_SERVER['HTTP_HOST'] vs. $_SERVER['SERVER_NAME'], am I understanding the manual pages correctly?

php apache security owasp

asked 2009-09-22T12:16:47.690

14

votes

1

answers

Security concerns with a Python PAM module?

python security pam suid

asked 2009-09-20T15:02:52.830

42

votes

13

answers

PHP API Key Generator

php security key generator api-key

asked 2009-09-19T12:22:36.260

10

votes

2

answers

How does ReCAPTCHA work?

security captcha recaptcha spam-prevention

asked 2009-09-16T21:52:44.080

34

votes

6

answers

Create a temporary FIFO (named pipe) in Python?

python security file fifo mkfifo

asked 2009-09-16T01:16:58.167

14

votes

5

answers

how to change session id after login in asp.net

asp.net security session

asked 2009-09-14T01:35:28.270

16

votes

2

answers

what is the use of anti-forgery token salt?

asp.net-mvc security csrf session-fixation

asked 2009-09-10T00:04:20.520

13

votes

6

answers

How deterministic Are .Net GUIDs?

.net security guid random

asked 2009-09-09T23:37:14.727

45

votes

3

answers

Best practice on users/roles on SQL Server for a web application

sql sql-server security

asked 2009-09-08T17:38:06.937

18

votes

7

answers

How do you prevent hired developers from stealing code?

security source-code-protection

asked 2009-09-05T05:22:34.310

41

votes

4

answers

Is HTTP header Referer sent when going to a http page from a https page?

security http https http-headers

asked 2009-09-01T10:25:57.813

15

votes

1

answers

GWT and Authentication

java security gwt

asked 2009-08-28T23:53:10.390

9

votes

5

answers

Software security Module/ toolkit replacing HSM for developing crypto functions

security encryption cryptography hsm

asked 2009-08-26T14:16:29.153

43

votes

4

answers

how safe are PDO prepared statements

php mysql security pdo sql-injection

asked 2009-08-21T22:47:09.557

11

votes

8

answers

what are the vulnerabilities in direct use of GET and POST?

php security post get

asked 2009-08-19T18:40:54.987

11

votes

1

answers

Confused over LocalSystem and LocalService Accounts

windows security windows-services localsystem

asked 2009-08-19T16:24:51.547

9

votes

7

answers

Protecting Java jar Files for Distribution

java security installation

asked 2009-08-14T23:43:38.060

14

votes

2

answers

Understanding the Wordpress vulnerability

php security wordpress

asked 2009-08-12T18:47:15.940

42

votes

5

answers

How does SQL query parameterisation work?

sql security sql-injection

asked 2009-08-11T21:45:18.380

10

votes

3

answers

Security implications of storing a password in Settings.bundle and getting with CFPreferencesCopyAppValue

iphone cocoa-touch security sdk settings.bundle

asked 2009-08-08T11:06:59.120

10

votes

11

answers

Why do so many sites disallow the use of non-alphanumeric characters in passwords?

security passwords

asked 2009-08-05T18:11:07.130

18

votes

9

answers

What do I need to store in the php session when user logged in?

php security session

asked 2009-08-03T09:39:49.007

10

votes

1

answers

Adding a OpenPGP signature to an already signed document?

security digital-signature gnupg pgp

asked 2009-07-29T19:29:10.050

13

votes

2

answers

ASP.NET MVC Custom Membership Provider Web.config Error

asp.net-mvc security asp.net-membership

asked 2009-07-28T04:46:10.943

9

votes

5

answers

Is it possible to create a forged file which has the same checksums using two different algorithms?

security cryptography

asked 2009-07-24T12:27:35.520

10

votes

5

answers

Encrypting War files

java security encryption

asked 2009-07-23T23:14:54.940

26

votes

30

answers

Surprising software vulnerabilities or exploits?

security

asked 2009-07-18T23:01:54.727

142

votes

10

answers

Encrypt password in configuration files

java security encryption configuration cryptography

asked 2009-07-15T16:47:21.170

21

votes

3

answers

What exactly can an IFrame do with the top.Location object (cross-domain)?

javascript security iframe cross-domain window.location

asked 2009-07-11T15:02:50.917

10

votes

5

answers

Are hashed and salted passwords secure against dictionary attacks?

security authentication hash salt-cryptography

asked 2009-07-10T19:25:12.037

Questions tagged security