Results 1 to 6 of 6

Thread: [RESOLVED] Form Cookies Security

Hybrid View

  1. Jul 21st, 2008, 08:44 AM #1
    visualAd
    visualAd is offline
    VBA Nutter visualAd's Avatar
    Join Date
    Apr 2002
    Location
    Ickenham, UK
    Posts
    4,906

    Re: Form Cookies Security

    Quote Originally Posted by LoopUntil
    Crypting the password in md5 or sha1 in the cookies is quite useless.
    Oh no, I never knew that. I will quickly remove it from all the sites I have made and replace it with the super secure plain text option.

    Quote Originally Posted by LoopUntil
    The file passwords.txt is protected with htaccess.
    It should be outside the document root so in event of a web server exploit or the accidental deletion/corruption of the .htaccess file, it is not compromised.

    Quote Originally Posted by LoopUntil
    The only thing I wanted to know is if some user can inject malicious code using the cookies and to know if this php code is secure.

    Example: <?php system('ls') ?> in the cookies (of other things like that)... my code will execute this?
    In answer to your question. There doesn't appear to be any code injection vulnerabilities. However, your code IS NOT secure for the reasons I mentioned above. SHA1 and MD5 are not useless as long as the programmer who utilises them is not an idiot.
    PHP || MySql || Apache || Get Firefox || OpenOffice.org || Click || Slap ILMV || 1337 c0d || GotoMyPc For FREE! Part 1, Part 2

    | PHP Session --> Database Handler * Custom Error Handler * Installing PHP * HTML Form Handler * PHP 5 OOP * Using XML * Ajax * Xslt | VB6 Winsock - HTTP POST / GET * Winsock - HTTP File Upload

    Latest quote: crptcblade - VB6 executables can't be decompiled, only disassembled. And the disassembled code is even less useful than I am.

    Random VisualAd: Blog - Latest Post: When the Internet becomes Electricity!!

    Spread happiness and joy. Rate good posts.
    Reply With Quote Reply With Quote
  2. Jul 21st, 2008, 03:05 PM #2
    LoopUntil
    LoopUntil is offline

    Thread Starter
    Member LoopUntil's Avatar
    Join Date
    Jul 2008
    Posts
    58

    Re: Form Cookies Security

    You are right, thanks, RESOLVED!
    Reply With Quote Reply With Quote
« Previous Thread | Next Thread »

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

Forum Rules


Click Here to Expand Forum to Full Width