How to avoid injection on old php site hosting

XSS - Part 2 (Cookie stealing and Defacement)

http://digitalpbk.blogspot.com/2006/12/xss-part-2-cookie-stealing-and.html is used to manage sessions in browsers. Each person logged in gets a unique cookie, it is like a key to the site. So if you can get hold of this cookie, you have the key to enter the site. The site will welcome as the person from whom you stealed the cookie. Now let us look how to grab the cookie using cross site scripting. For cookie stealing there must be an xss hole which can be injected through the url of the page like the one on propmart.com we discussed in first part.Getting a cookie ...

Virtual Hosts on Apache 2.2.6 [Windows]

http://digitalpbk.blogspot.com/2007/12/virtual-hosts-apache-226-windows.html VirtualHost section is used for all requests that do not# match a ServerName or ServerAlias in any block.# ServerName localhost DocumentRoot "F:/webs/localhost" DirectoryIndex index.php index.html index.htm index.shtml DocumentRoot "F:/webs/kitiyo.com" ServerName pp.com DirectoryIndex index.php index.html index.htm index.shtmlIn the above example shows localhost and kitiyo.com host on same server.Remember to add the sites in the hosts file. ...

Introduction to XSS Part 1

http://digitalpbk.blogspot.com/2006/12/introduction-to-xss-part-1.html Introduction to XSS Part 1 This document is purely for illustrative purposes only. I am not responsible for any losses arising to the websites mentioned below. Webmasters please be more alert...What is it?XSS stands for cross site scripting (CSS) Since CSS is already taken by Cascaded Style Sheets, it is named XSS X standing for a Cross. It is a kind of hacking which allows you to deface websites, loggin as another user etc. IntroductionLet us start by looking how websites work. Starting ...

SQL Injection: Tutorial Part 1

http://digitalpbk.blogspot.com/2009/06/hacking-sql-injection-tutorial.html SQL Injection: Tutorial Part 1 SQL InjectionWhat? What is SQL ? SQL stands for Structured Query Language, It is the most widely used database querying language. Before reading on I must say that this is an old technique and I dint want this to be posted because most sites have patched up this hole. I am posting this for the few websites I came across that had this vulnerability. If you have a website or planning to build one or administrates one please read on and fix the security holes ...

Making subdomains on localhost

http://digitalpbk.blogspot.com/2007/01/making-subdomains-on-localhost.html Making subdomains on localhost IntroDeveloping websites on localhost may sometimes need making of sub domains. Installing and running another server for this purpose is useless, consumes more resources etc. So here is the technique to make sub domains on localhost. You can also use this to host more than one site on localhost. i.e, you can host multiple sites situated on different folders. PS: This is for Apache-Windows configuration. (If you have info about other Server-OS configs please let ...

About "HOSTS" File

http://digitalpbk.blogspot.com/2006/11/about-hosts-file.html .25.63.10 x.acme.com # x client host127.0.0.1 localhostThe Lines followed by a # are comments and explains how to use the HOSTS file. 127.0.0.1 is the IP address that is used to loopback to your computer itself. So if you are running an apache or IIS server or anyother server software, you can access it by the url http://localhost or http://127.0.0.1 What now ? Suppose you want to block some sites for example say you want to block "www.sicksite.com". All you have to do is add ...

FTPCHK3 : Virus that adds malicious scripts to your website.

http://digitalpbk.blogspot.com/2009/10/ftpchk3-virus-php-pl-hacked-website.html FTPCHK3 : Virus that adds malicious scripts to your website. IntroThis virus changes all your web files, php, html javascript and tpl files in prominent CMS systems to add a malicious script into your site. This injection allows the attacker to remotely execute PHP code on your website if the php infected code is running on your pages. Its supposedly called Bagle. But who cares about the name? It's nasty and start fixing.How it got in ?This can be due to potential security holes in your FTP ...

Setting up Apache-PHP on windows.

http://digitalpbk.blogspot.com/2006/12/setting-up-apache-php-on-windows.html "C:\apache2\" is our directory.Verify your installation by taking your browser and visiting http://127.0.0.1 or http://localhost.You will see a page that confirms your apache installation.Step 3 : Configuring apacheNow goto "C:\Apache2\conf\".Open the file "httpd.conf" in any text editor.Lines beginning with # are comments .. just read them to know how to tweak apache.Change the DocumentRoot property to the folder which is the root of the site. ## DocumentRoot: The directory out of which ...

An Introduction to PHP

http://digitalpbk.blogspot.com/2007/04/introduction-to-php-part1.html An Introduction to PHP PHP ?PHP stands for Hypertext Preprocessor. Well what is it ? In the world wide web we are familiar with the HTML page. The HTML page is static and does not change. What if we want a page that has some parts common and other parts different according to the browser or user that is visiting the site? Say for an example, a user's profile page. It is wasteful and time consuming to make each user a separate HTML page. Here is where Server side scripting comes in. Thus we ...

How to Integrate another Website to Google Analytics Tracking and Adsense

http://digitalpbk.com/adsense-analytics/how-integrate-google-analytics-tracking-and-adsense How to Integrate another Website to Google Analytics Tracking and Adsense This was supposed to be obvious, but I couldnt find easily how to integrate Google Adsense and Analytics to track your Adsense Ad performance on google analytics. Make sure you display ads on your page and the analytics tracking code. Make sure you have linked the adsense and analytics together before doing this. The following is to add one more site to track adsense. And then Getting straight to the answer, put ...