Hopefully as you may have noticed, on a daily basis more and more of our (users) privacy is stripped shamelessly away by almost every website out there.
And so you don’t think I am speaking in a hypocritical manner, I admit I strip as well a part from your privacy, with the simple Google tracker I have inside my web pages… but for those that do care about their anonymity this is not an issue.
Yesterday while browsing some security tagged discussions on stackoverflow.com I’ve noticed someone mentioned some filter_ prefixed PHP functions. At first I thought they were some custom written ones, but on a quick check it turned out that there really where this functions. I was shocked. Anyway, let’s digg into it…
A while ago I wrote an article entitled Logging the HTTP requests! where I mentioned why you should implement a logging system (especially when you haven’t got access to the access log, like in shared hosting environment) and how to implement a simple (or not) logging system. Today we will go a step further.
Since I moved my blog to the self hosted domain I said I will write my .htaccess file, especially for the mod_rewrite rules; you know, create a simple WAF. Well that didn’t work out, or better said I was too lazy till know to do it.
Anyway, you’re came here for other reasons. I found today a comprehensive article on .htaccess files, which you can (and highly recommend) read it here. Also you might be interested in a mod rewrite cheat sheet and a regular expression cheat sheet.
I always have been annoyed by things like: the morning alarm clock, long distance travels, undocumented functions and spam. But from all the above mentioned spam as well may be the most annoying one from it, the rest of them don’t happen that often.
(continue)
Mozilla Firefox thanks to it addons can truly be a web application pen-testers platform. And this concept is not new, is it?
(continue)