php – rozenek.com

Tag: php

Blog

SKT Full Width Theme for WordPress – How To Increase Homepage Slides Numbers

24 August 201431 August 2014 admin

Together with the WordPress 3.9.2 on http://panorama360.photo I run my favourite photo theme SKT Full Width 1.3.9 (on 24 Aug 2014).

Continue readingSKT Full Width Theme for WordPress – How To Increase Homepage Slides Numbers

<img width="153" height="100" src="https://www.rozenek.com/wp-content/uploads/2014/03/thumbnail4.jpg" class="attachment-post-thumbnail size-post-thumbnail wp-post-image" alt="" decoding="async" />

Blog

Uruchamianie zdalnego pliku

22 March 2014 admin

Przypuśćmy, że mamy index.php?plik=news.php a w kodzie php:

<img width="153" height="100" src="https://www.rozenek.com/wp-content/uploads/2014/03/thumbnail4.jpg" class="attachment-post-thumbnail size-post-thumbnail wp-post-image" alt="" decoding="async" />

Blog

Session Hijacking

22 March 2014 admin

Typ ataku powiązany z poprzednim, kiedy ktoś ma wyłączone ciasteczka w przeglądarce to identyfikator sesji jest dołączany do adresu, gdy

Continue readingSession Hijacking

<img width="153" height="100" data-src="https://www.rozenek.com/wp-content/uploads/2014/03/thumbnail4.jpg" class="attachment-post-thumbnail size-post-thumbnail wp-post-image lazyload" alt="" decoding="async" loading="lazy" src="data:image/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==" style="--smush-placeholder-width: 153px; --smush-placeholder-aspect-ratio: 153/100;" /><noscript><img width="153" height="100" data-src="https://www.rozenek.com/wp-content/uploads/2014/03/thumbnail4.jpg" class="attachment-post-thumbnail size-post-thumbnail wp-post-image lazyload" alt="" decoding="async" loading="lazy" src="data:image/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==" style="--smush-placeholder-width: 153px; --smush-placeholder-aspect-ratio: 153/100;" /><noscript><img width="153" height="100" data-src="https://www.rozenek.com/wp-content/uploads/2014/03/thumbnail4.jpg" class="attachment-post-thumbnail size-post-thumbnail wp-post-image lazyload" alt="" decoding="async" loading="lazy" src="data:image/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==" style="--smush-placeholder-width: 153px; --smush-placeholder-aspect-ratio: 153/100;" /><noscript><img width="153" height="100" data-src="https://www.rozenek.com/wp-content/uploads/2014/03/thumbnail4.jpg" class="attachment-post-thumbnail size-post-thumbnail wp-post-image lazyload" alt="" decoding="async" loading="lazy" src="data:image/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==" style="--smush-placeholder-width: 153px; --smush-placeholder-aspect-ratio: 153/100;" /><noscript><img width="153" height="100" data-src="https://www.rozenek.com/wp-content/uploads/2014/03/thumbnail4.jpg" class="attachment-post-thumbnail size-post-thumbnail wp-post-image lazyload" alt="" decoding="async" loading="lazy" src="data:image/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==" style="--smush-placeholder-width: 153px; --smush-placeholder-aspect-ratio: 153/100;" /><noscript><img width="153" height="100" src="https://www.rozenek.com/wp-content/uploads/2014/03/thumbnail4.jpg" class="attachment-post-thumbnail size-post-thumbnail wp-post-image" alt="" decoding="async" loading="lazy" />

Blog

Session Fixation

22 March 2014 admin

Kiedy podamy skryptowi PHP nieistniejący ID sesji, zostanie on utworzony. Jak hakerzy mogą to wykorzystać ? Najprościej poprzez dodanie do

Continue readingSession Fixation

<img width="153" height="100" data-src="https://www.rozenek.com/wp-content/uploads/2014/03/thumbnail4.jpg" class="attachment-post-thumbnail size-post-thumbnail wp-post-image lazyload" alt="" decoding="async" loading="lazy" src="data:image/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==" style="--smush-placeholder-width: 153px; --smush-placeholder-aspect-ratio: 153/100;" /><noscript><img width="153" height="100" data-src="https://www.rozenek.com/wp-content/uploads/2014/03/thumbnail4.jpg" class="attachment-post-thumbnail size-post-thumbnail wp-post-image lazyload" alt="" decoding="async" loading="lazy" src="data:image/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==" style="--smush-placeholder-width: 153px; --smush-placeholder-aspect-ratio: 153/100;" /><noscript><img width="153" height="100" data-src="https://www.rozenek.com/wp-content/uploads/2014/03/thumbnail4.jpg" class="attachment-post-thumbnail size-post-thumbnail wp-post-image lazyload" alt="" decoding="async" loading="lazy" src="data:image/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==" style="--smush-placeholder-width: 153px; --smush-placeholder-aspect-ratio: 153/100;" /><noscript><img width="153" height="100" data-src="https://www.rozenek.com/wp-content/uploads/2014/03/thumbnail4.jpg" class="attachment-post-thumbnail size-post-thumbnail wp-post-image lazyload" alt="" decoding="async" loading="lazy" src="data:image/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==" style="--smush-placeholder-width: 153px; --smush-placeholder-aspect-ratio: 153/100;" /><noscript><img width="153" height="100" data-src="https://www.rozenek.com/wp-content/uploads/2014/03/thumbnail4.jpg" class="attachment-post-thumbnail size-post-thumbnail wp-post-image lazyload" alt="" decoding="async" loading="lazy" src="data:image/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==" style="--smush-placeholder-width: 153px; --smush-placeholder-aspect-ratio: 153/100;" /><noscript><img width="153" height="100" src="https://www.rozenek.com/wp-content/uploads/2014/03/thumbnail4.jpg" class="attachment-post-thumbnail size-post-thumbnail wp-post-image" alt="" decoding="async" loading="lazy" />

Blog

Cross-site request forgery (CSRF)

22 March 2014 admin

Bardzo niebezpieczny typ ataku, polegający na wykorzystywaniu uprawnień osoby atakowanej. Polega on na przesłaniu osobie posiadającej uprawnienia do wykonania danej

Continue readingCross-site request forgery (CSRF)

<img width="153" height="100" data-src="https://www.rozenek.com/wp-content/uploads/2014/03/thumbnail4.jpg" class="attachment-post-thumbnail size-post-thumbnail wp-post-image lazyload" alt="" decoding="async" loading="lazy" src="data:image/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==" style="--smush-placeholder-width: 153px; --smush-placeholder-aspect-ratio: 153/100;" /><noscript><img width="153" height="100" data-src="https://www.rozenek.com/wp-content/uploads/2014/03/thumbnail4.jpg" class="attachment-post-thumbnail size-post-thumbnail wp-post-image lazyload" alt="" decoding="async" loading="lazy" src="data:image/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==" style="--smush-placeholder-width: 153px; --smush-placeholder-aspect-ratio: 153/100;" /><noscript><img width="153" height="100" data-src="https://www.rozenek.com/wp-content/uploads/2014/03/thumbnail4.jpg" class="attachment-post-thumbnail size-post-thumbnail wp-post-image lazyload" alt="" decoding="async" loading="lazy" src="data:image/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==" style="--smush-placeholder-width: 153px; --smush-placeholder-aspect-ratio: 153/100;" /><noscript><img width="153" height="100" data-src="https://www.rozenek.com/wp-content/uploads/2014/03/thumbnail4.jpg" class="attachment-post-thumbnail size-post-thumbnail wp-post-image lazyload" alt="" decoding="async" loading="lazy" src="data:image/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==" style="--smush-placeholder-width: 153px; --smush-placeholder-aspect-ratio: 153/100;" /><noscript><img width="153" height="100" data-src="https://www.rozenek.com/wp-content/uploads/2014/03/thumbnail4.jpg" class="attachment-post-thumbnail size-post-thumbnail wp-post-image lazyload" alt="" decoding="async" loading="lazy" src="data:image/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==" style="--smush-placeholder-width: 153px; --smush-placeholder-aspect-ratio: 153/100;" /><noscript><img width="153" height="100" src="https://www.rozenek.com/wp-content/uploads/2014/03/thumbnail4.jpg" class="attachment-post-thumbnail size-post-thumbnail wp-post-image" alt="" decoding="async" loading="lazy" />

Blog

Cross-site scripting (XSS)

22 March 2014 admin

Atak polegający na wstawieniu spreparowanego kody do skryptu PHP (najczęściej w HTML lub JavaScript). Często ten błąd spotykany jest w

Continue readingCross-site scripting (XSS)

<img width="153" height="100" data-src="https://www.rozenek.com/wp-content/uploads/2014/03/thumbnail4.jpg" class="attachment-post-thumbnail size-post-thumbnail wp-post-image lazyload" alt="" decoding="async" loading="lazy" src="data:image/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==" style="--smush-placeholder-width: 153px; --smush-placeholder-aspect-ratio: 153/100;" /><noscript><img width="153" height="100" data-src="https://www.rozenek.com/wp-content/uploads/2014/03/thumbnail4.jpg" class="attachment-post-thumbnail size-post-thumbnail wp-post-image lazyload" alt="" decoding="async" loading="lazy" src="data:image/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==" style="--smush-placeholder-width: 153px; --smush-placeholder-aspect-ratio: 153/100;" /><noscript><img width="153" height="100" data-src="https://www.rozenek.com/wp-content/uploads/2014/03/thumbnail4.jpg" class="attachment-post-thumbnail size-post-thumbnail wp-post-image lazyload" alt="" decoding="async" loading="lazy" src="data:image/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==" style="--smush-placeholder-width: 153px; --smush-placeholder-aspect-ratio: 153/100;" /><noscript><img width="153" height="100" data-src="https://www.rozenek.com/wp-content/uploads/2014/03/thumbnail4.jpg" class="attachment-post-thumbnail size-post-thumbnail wp-post-image lazyload" alt="" decoding="async" loading="lazy" src="data:image/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==" style="--smush-placeholder-width: 153px; --smush-placeholder-aspect-ratio: 153/100;" /><noscript><img width="153" height="100" data-src="https://www.rozenek.com/wp-content/uploads/2014/03/thumbnail4.jpg" class="attachment-post-thumbnail size-post-thumbnail wp-post-image lazyload" alt="" decoding="async" loading="lazy" src="data:image/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==" style="--smush-placeholder-width: 153px; --smush-placeholder-aspect-ratio: 153/100;" /><noscript><img width="153" height="100" src="https://www.rozenek.com/wp-content/uploads/2014/03/thumbnail4.jpg" class="attachment-post-thumbnail size-post-thumbnail wp-post-image" alt="" decoding="async" loading="lazy" />

Blog

Filtrowanie Danych w PHP

22 March 2014 admin

Wszystkie dane przesłane do skryptu przez użytkowników powinny być dokładnie filtrowane pod kątem obecności w nich kodu HTML i PHP,

Continue readingFiltrowanie Danych w PHP

<img width="153" height="100" data-src="https://www.rozenek.com/wp-content/uploads/2014/03/thumbnail4.jpg" class="attachment-post-thumbnail size-post-thumbnail wp-post-image lazyload" alt="" decoding="async" loading="lazy" src="data:image/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==" style="--smush-placeholder-width: 153px; --smush-placeholder-aspect-ratio: 153/100;" /><noscript><img width="153" height="100" data-src="https://www.rozenek.com/wp-content/uploads/2014/03/thumbnail4.jpg" class="attachment-post-thumbnail size-post-thumbnail wp-post-image lazyload" alt="" decoding="async" loading="lazy" src="data:image/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==" style="--smush-placeholder-width: 153px; --smush-placeholder-aspect-ratio: 153/100;" /><noscript><img width="153" height="100" data-src="https://www.rozenek.com/wp-content/uploads/2014/03/thumbnail4.jpg" class="attachment-post-thumbnail size-post-thumbnail wp-post-image lazyload" alt="" decoding="async" loading="lazy" src="data:image/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==" style="--smush-placeholder-width: 153px; --smush-placeholder-aspect-ratio: 153/100;" /><noscript><img width="153" height="100" data-src="https://www.rozenek.com/wp-content/uploads/2014/03/thumbnail4.jpg" class="attachment-post-thumbnail size-post-thumbnail wp-post-image lazyload" alt="" decoding="async" loading="lazy" src="data:image/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==" style="--smush-placeholder-width: 153px; --smush-placeholder-aspect-ratio: 153/100;" /><noscript><img width="153" height="100" data-src="https://www.rozenek.com/wp-content/uploads/2014/03/thumbnail4.jpg" class="attachment-post-thumbnail size-post-thumbnail wp-post-image lazyload" alt="" decoding="async" loading="lazy" src="data:image/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==" style="--smush-placeholder-width: 153px; --smush-placeholder-aspect-ratio: 153/100;" /><noscript><img width="153" height="100" src="https://www.rozenek.com/wp-content/uploads/2014/03/thumbnail4.jpg" class="attachment-post-thumbnail size-post-thumbnail wp-post-image" alt="" decoding="async" loading="lazy" />

Blog

SQL Injection

22 March 2014 admin

Błąd ten umożliwia modyfikacje zapytania, czy nawet wykonanie dodatkowego zapytania (np. usuwającego rekordy). Załóżmy że mamy takie zapytanie MySQL

<img width="153" height="100" data-src="https://www.rozenek.com/wp-content/uploads/2014/03/thumbnail4.jpg" class="attachment-post-thumbnail size-post-thumbnail wp-post-image lazyload" alt="" decoding="async" loading="lazy" src="data:image/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==" style="--smush-placeholder-width: 153px; --smush-placeholder-aspect-ratio: 153/100;" /><noscript><img width="153" height="100" data-src="https://www.rozenek.com/wp-content/uploads/2014/03/thumbnail4.jpg" class="attachment-post-thumbnail size-post-thumbnail wp-post-image lazyload" alt="" decoding="async" loading="lazy" src="data:image/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==" style="--smush-placeholder-width: 153px; --smush-placeholder-aspect-ratio: 153/100;" /><noscript><img width="153" height="100" data-src="https://www.rozenek.com/wp-content/uploads/2014/03/thumbnail4.jpg" class="attachment-post-thumbnail size-post-thumbnail wp-post-image lazyload" alt="" decoding="async" loading="lazy" src="data:image/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==" style="--smush-placeholder-width: 153px; --smush-placeholder-aspect-ratio: 153/100;" /><noscript><img width="153" height="100" data-src="https://www.rozenek.com/wp-content/uploads/2014/03/thumbnail4.jpg" class="attachment-post-thumbnail size-post-thumbnail wp-post-image lazyload" alt="" decoding="async" loading="lazy" src="data:image/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==" style="--smush-placeholder-width: 153px; --smush-placeholder-aspect-ratio: 153/100;" /><noscript><img width="153" height="100" data-src="https://www.rozenek.com/wp-content/uploads/2014/03/thumbnail4.jpg" class="attachment-post-thumbnail size-post-thumbnail wp-post-image lazyload" alt="" decoding="async" loading="lazy" src="data:image/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==" style="--smush-placeholder-width: 153px; --smush-placeholder-aspect-ratio: 153/100;" /><noscript><img width="153" height="100" src="https://www.rozenek.com/wp-content/uploads/2014/03/thumbnail4.jpg" class="attachment-post-thumbnail size-post-thumbnail wp-post-image" alt="" decoding="async" loading="lazy" />

Blog

Przechowanie danych w plikach tekstowych

22 March 2014 admin

Często, zwłaszcza mniejsze serwisy zamiast bazy SQL używają plików jednorodnych do przechowywania danych. Najczęściej jest to zwykła treść strony (artykuły,

Continue readingPrzechowanie danych w plikach tekstowych

<img width="153" height="100" data-src="https://www.rozenek.com/wp-content/uploads/2014/03/thumbnail4.jpg" class="attachment-post-thumbnail size-post-thumbnail wp-post-image lazyload" alt="" decoding="async" loading="lazy" src="data:image/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==" style="--smush-placeholder-width: 153px; --smush-placeholder-aspect-ratio: 153/100;" /><noscript><img width="153" height="100" data-src="https://www.rozenek.com/wp-content/uploads/2014/03/thumbnail4.jpg" class="attachment-post-thumbnail size-post-thumbnail wp-post-image lazyload" alt="" decoding="async" loading="lazy" src="data:image/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==" style="--smush-placeholder-width: 153px; --smush-placeholder-aspect-ratio: 153/100;" /><noscript><img width="153" height="100" data-src="https://www.rozenek.com/wp-content/uploads/2014/03/thumbnail4.jpg" class="attachment-post-thumbnail size-post-thumbnail wp-post-image lazyload" alt="" decoding="async" loading="lazy" src="data:image/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==" style="--smush-placeholder-width: 153px; --smush-placeholder-aspect-ratio: 153/100;" /><noscript><img width="153" height="100" data-src="https://www.rozenek.com/wp-content/uploads/2014/03/thumbnail4.jpg" class="attachment-post-thumbnail size-post-thumbnail wp-post-image lazyload" alt="" decoding="async" loading="lazy" src="data:image/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==" style="--smush-placeholder-width: 153px; --smush-placeholder-aspect-ratio: 153/100;" /><noscript><img width="153" height="100" data-src="https://www.rozenek.com/wp-content/uploads/2014/03/thumbnail4.jpg" class="attachment-post-thumbnail size-post-thumbnail wp-post-image lazyload" alt="" decoding="async" loading="lazy" src="data:image/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==" style="--smush-placeholder-width: 153px; --smush-placeholder-aspect-ratio: 153/100;" /><noscript><img width="153" height="100" src="https://www.rozenek.com/wp-content/uploads/2014/03/thumbnail4.jpg" class="attachment-post-thumbnail size-post-thumbnail wp-post-image" alt="" decoding="async" loading="lazy" />

Blog

Zmienne globalne, register_globals

22 March 2014 admin

Gdy w pliku konfiguracyjnym PHP, dyrektywa register_globals jest ustawiona na wartość on, możemy do zmienny odwoływać się w wygodnym, krótkim

Continue readingZmienne globalne, register_globals