Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security Web-App-Sec
[Top] [All Lists]
<prev [Date] next>
[Advanced]
 <prev [Thread] next>

Re: MYSQL and PHP

from [s89df987 s9f87s987f] Network Security [Permanent Link]
Subject: Re: MYSQL and PHP
Date: Sat, 20 May 2006 21:53:37 -0500

On 5/20/06, &#931;&#960;&#965;&#961;&#943;&#948;&#969;&#957; &#925;&#943;&#957;&#959;&#962; <sninos@ee.duth.gr> wrote: 
hello everybody,

I don't actually follow this thread, but I believe that
nobody has actually mentioned renaming your include file
in a name that begins with ".ht".

Given that almost any apache conf file has the following
(or similar):

<snip>

you shouldn't assume the web server is apache
the safest thing to do would be to have your include files with the .php ext
so no matter what the web server is, it will have the same effect

_________________________________________________________________
Don?t just search. Find. Check out the new MSN Search! http://search.msn.click-url.com/go/onm00200636ave/direct/01/


-------------------------------------------------------------------------
Sponsored by: Watchfire

Watchfire named worldwide market share leader in web application security assessment by leading market research firm. Watchfire's AppScan is the industry's first and leading web application security testing suite, and the only solution to provide comprehensive remediation tasks at every level of the application. See for yourself. Download a Free Trial of AppScan 6.0 today!

https://www.watchfire.com/securearea/appscansix.aspx?id=701300000007t9c
--------------------------------------------------------------------------

[More messages with this same subject...]




<Prev in Thread] Current Thread [Next in Thread>
Previous by Date:  Re: Non SSL Bank Login Forms, Jason Muskat
Next by Date:  Write-up by Amit Klein: "IE + some popular forward proxy servers = XSS, defacement (browser cache poisoning)", Amit Klein (AKsecurity)
Previous by Thread:  Re: MYSQL and PHP, Σπυρίδων Νίνος
Next by Thread:  Final Registration Reminder: 2006 European OWASP AppSec Conference - May 30-31, 2006 near Brussels, Dave Wichers
Indexes:  [Date] [Thread] [Top] [All Lists]