Xidos Posted April 28, 2008 Share Posted April 28, 2008 Can a few people if possible scan through my website, Xidos , for possible security risks? Such as SQL injection and so on...please. I would be grateful, it's only a small site so any tests will be should be done quick and simple. Link to comment Share on other sites More sharing options...
allistera Posted April 29, 2008 Share Posted April 29, 2008 On http://xidos.co.uk/portfolio.php The link to "MMO Reviews" doesn't work, put http:// in it. Contact form seems fine. Link to comment Share on other sites More sharing options...
Coreye Posted April 29, 2008 Share Posted April 29, 2008 Includes Directory: http://xidos.co.uk/includes/ Full Path Disclosure: http://xidos.co.uk/includes/securityimage/security-image.php?width Warning: imagecreate() [function.imagecreate]: Invalid image dimensions in /home/xidosco/public_html/includes/securityimage/security-image.inc.php on line 21 Warning: imagecolorallocate(): supplied argument is not a valid Image resource in /home/xidosco/public_html/includes/securityimage/security-image.inc.php on line 24 Warning: imagecolorallocate(): supplied argument is not a valid Image resource in /home/xidosco/public_html/includes/securityimage/security-image.inc.php on line 33 Warning: imageline(): supplied argument is not a valid Image resource in /home/xidosco/public_html/includes/securityimage/security-image.inc.php on line 34 Warning: imagecolorallocate(): supplied argument is not a valid Image resource in /home/xidosco/public_html/includes/securityimage/security-image.inc.php on line 33 Warning: imageline(): supplied argument is not a valid Image resource in /home/xidosco/public_html/includes/securityimage/security-image.inc.php on line 34 Warning: imagecolorallocate(): supplied argument is not a valid Image resource in /home/xidosco/public_html/includes/securityimage/security-image.inc.php on line 33 Warning: imageline(): supplied argument is not a valid Image resource in /home/xidosco/public_html/includes/securityimage/security-image.inc.php on line 34 Warning: imagecolorallocate(): supplied argument is not a valid Image resource in /home/xidosco/public_html/includes/securityimage/security-image.inc.php on line 33 Warning: imageline(): supplied argument is not a valid Image resource in /home/xidosco/public_html/includes/securityimage/security-image.inc.php on line 34 Warning: imagecolorallocate(): supplied argument is not a valid Image resource in /home/xidosco/public_html/includes/securityimage/security-image.inc.php on line 33 Warning: imageline(): supplied argument is not a valid Image resource in /home/xidosco/public_html/includes/securityimage/security-image.inc.php on line 34 Warning: imagecolorallocate(): supplied argument is not a valid Image resource in /home/xidosco/public_html/includes/securityimage/security-image.inc.php on line 33 Warning: imageline(): supplied argument is not a valid Image resource in /home/xidosco/public_html/includes/securityimage/security-image.inc.php on line 34 Warning: imagecolorallocate(): supplied argument is not a valid Image resource in /home/xidosco/public_html/includes/securityimage/security-image.inc.php on line 33 Warning: imageline(): supplied argument is not a valid Image resource in /home/xidosco/public_html/includes/securityimage/security-image.inc.php on line 34 Warning: imagecolorallocate(): supplied argument is not a valid Image resource in /home/xidosco/public_html/includes/securityimage/security-image.inc.php on line 33 Warning: imageline(): supplied argument is not a valid Image resource in /home/xidosco/public_html/includes/securityimage/security-image.inc.php on line 34 Warning: imagecolorallocate(): supplied argument is not a valid Image resource in /home/xidosco/public_html/includes/securityimage/security-image.inc.php on line 33 Warning: imageline(): supplied argument is not a valid Image resource in /home/xidosco/public_html/includes/securityimage/security-image.inc.php on line 34 Warning: imagecolorallocate(): supplied argument is not a valid Image resource in /home/xidosco/public_html/includes/securityimage/security-image.inc.php on line 33 Warning: imageline(): supplied argument is not a valid Image resource in /home/xidosco/public_html/includes/securityimage/security-image.inc.php on line 34 Warning: imagecolorallocate(): supplied argument is not a valid Image resource in /home/xidosco/public_html/includes/securityimage/security-image.inc.php on line 33 Warning: imageline(): supplied argument is not a valid Image resource in /home/xidosco/public_html/includes/securityimage/security-image.inc.php on line 34 Warning: imagecolorallocate(): supplied argument is not a valid Image resource in /home/xidosco/public_html/includes/securityimage/security-image.inc.php on line 33 Warning: imageline(): supplied argument is not a valid Image resource in /home/xidosco/public_html/includes/securityimage/security-image.inc.php on line 34 Warning: imagecolorallocate(): supplied argument is not a valid Image resource in /home/xidosco/public_html/includes/securityimage/security-image.inc.php on line 33 Warning: imageline(): supplied argument is not a valid Image resource in /home/xidosco/public_html/includes/securityimage/security-image.inc.php on line 34 Warning: imagecolorallocate(): supplied argument is not a valid Image resource in /home/xidosco/public_html/includes/securityimage/security-image.inc.php on line 33 Warning: imageline(): supplied argument is not a valid Image resource in /home/xidosco/public_html/includes/securityimage/security-image.inc.php on line 34 Warning: imagecolorallocate(): supplied argument is not a valid Image resource in /home/xidosco/public_html/includes/securityimage/security-image.inc.php on line 33 Warning: imageline(): supplied argument is not a valid Image resource in /home/xidosco/public_html/includes/securityimage/security-image.inc.php on line 34 Warning: imagecolorallocate(): supplied argument is not a valid Image resource in /home/xidosco/public_html/includes/securityimage/security-image.inc.php on line 33 Warning: imageline(): supplied argument is not a valid Image resource in /home/xidosco/public_html/includes/securityimage/security-image.inc.php on line 34 Warning: imagecolorallocate(): supplied argument is not a valid Image resource in /home/xidosco/public_html/includes/securityimage/security-image.inc.php on line 33 Warning: imageline(): supplied argument is not a valid Image resource in /home/xidosco/public_html/includes/securityimage/security-image.inc.php on line 34 Warning: imagecolorallocate(): supplied argument is not a valid Image resource in /home/xidosco/public_html/includes/securityimage/security-image.inc.php on line 33 Warning: imageline(): supplied argument is not a valid Image resource in /home/xidosco/public_html/includes/securityimage/security-image.inc.php on line 34 Warning: imagecolorallocate(): supplied argument is not a valid Image resource in /home/xidosco/public_html/includes/securityimage/security-image.inc.php on line 33 Warning: imageline(): supplied argument is not a valid Image resource in /home/xidosco/public_html/includes/securityimage/security-image.inc.php on line 34 Warning: imagecolorallocate(): supplied argument is not a valid Image resource in /home/xidosco/public_html/includes/securityimage/security-image.inc.php on line 33 Warning: imageline(): supplied argument is not a valid Image resource in /home/xidosco/public_html/includes/securityimage/security-image.inc.php on line 34 Warning: imagecolorallocate(): supplied argument is not a valid Image resource in /home/xidosco/public_html/includes/securityimage/security-image.inc.php on line 33 Warning: imageline(): supplied argument is not a valid Image resource in /home/xidosco/public_html/includes/securityimage/security-image.inc.php on line 34 Warning: imagecolorallocate(): supplied argument is not a valid Image resource in /home/xidosco/public_html/includes/securityimage/security-image.inc.php on line 33 Warning: imageline(): supplied argument is not a valid Image resource in /home/xidosco/public_html/includes/securityimage/security-image.inc.php on line 34 Warning: imagecolorallocate(): supplied argument is not a valid Image resource in /home/xidosco/public_html/includes/securityimage/security-image.inc.php on line 33 Warning: imageline(): supplied argument is not a valid Image resource in /home/xidosco/public_html/includes/securityimage/security-image.inc.php on line 34 Warning: imagecolorallocate(): supplied argument is not a valid Image resource in /home/xidosco/public_html/includes/securityimage/security-image.inc.php on line 33 Warning: imageline(): supplied argument is not a valid Image resource in /home/xidosco/public_html/includes/securityimage/security-image.inc.php on line 34 Warning: imagecolorallocate(): supplied argument is not a valid Image resource in /home/xidosco/public_html/includes/securityimage/security-image.inc.php on line 33 Warning: imageline(): supplied argument is not a valid Image resource in /home/xidosco/public_html/includes/securityimage/security-image.inc.php on line 34 Warning: imagecolorallocate(): supplied argument is not a valid Image resource in /home/xidosco/public_html/includes/securityimage/security-image.inc.php on line 33 Warning: imageline(): supplied argument is not a valid Image resource in /home/xidosco/public_html/includes/securityimage/security-image.inc.php on line 34 Warning: imagecolorallocate(): supplied argument is not a valid Image resource in /home/xidosco/public_html/includes/securityimage/security-image.inc.php on line 33 Warning: imageline(): supplied argument is not a valid Image resource in /home/xidosco/public_html/includes/securityimage/security-image.inc.php on line 34 Warning: imagecolorallocate(): supplied argument is not a valid Image resource in /home/xidosco/public_html/includes/securityimage/security-image.inc.php on line 33 Warning: imageline(): supplied argument is not a valid Image resource in /home/xidosco/public_html/includes/securityimage/security-image.inc.php on line 34 Warning: imagecolorallocate(): supplied argument is not a valid Image resource in /home/xidosco/public_html/includes/securityimage/security-image.inc.php on line 33 Warning: imageline(): supplied argument is not a valid Image resource in /home/xidosco/public_html/includes/securityimage/security-image.inc.php on line 34 Warning: imagecolorallocate(): supplied argument is not a valid Image resource in /home/xidosco/public_html/includes/securityimage/security-image.inc.php on line 33 Warning: imageline(): supplied argument is not a valid Image resource in /home/xidosco/public_html/includes/securityimage/security-image.inc.php on line 34 Warning: imagecolorallocate(): supplied argument is not a valid Image resource in /home/xidosco/public_html/includes/securityimage/security-image.inc.php on line 79 Warning: imagestring(): supplied argument is not a valid Image resource in /home/xidosco/public_html/includes/securityimage/security-image.inc.php on line 82 Warning: imagecolorallocate(): supplied argument is not a valid Image resource in /home/xidosco/public_html/includes/securityimage/security-image.inc.php on line 79 Warning: imagestring(): supplied argument is not a valid Image resource in /home/xidosco/public_html/includes/securityimage/security-image.inc.php on line 82 Warning: imagecolorallocate(): supplied argument is not a valid Image resource in /home/xidosco/public_html/includes/securityimage/security-image.inc.php on line 79 Warning: imagestring(): supplied argument is not a valid Image resource in /home/xidosco/public_html/includes/securityimage/security-image.inc.php on line 82 Warning: imagecolorallocate(): supplied argument is not a valid Image resource in /home/xidosco/public_html/includes/securityimage/security-image.inc.php on line 79 Warning: imagestring(): supplied argument is not a valid Image resource in /home/xidosco/public_html/includes/securityimage/security-image.inc.php on line 82 Warning: imagecolorallocate(): supplied argument is not a valid Image resource in /home/xidosco/public_html/includes/securityimage/security-image.inc.php on line 79 Warning: imagestring(): supplied argument is not a valid Image resource in /home/xidosco/public_html/includes/securityimage/security-image.inc.php on line 82 Warning: Cannot modify header information - headers already sent by (output started at /home/xidosco/public_html/includes/securityimage/security-image.inc.php:21) in /home/xidosco/public_html/includes/securityimage/security-image.inc.php on line 102 Warning: imagegif(): supplied argument is not a valid Image resource in /home/xidosco/public_html/includes/securityimage/security-image.inc.php on line 105 Warning: imagedestroy(): supplied argument is not a valid Image resource in /home/xidosco/public_html/includes/securityimage/security-image.inc.php on line 109 Link to comment Share on other sites More sharing options...
TheFilmGod Posted May 7, 2008 Share Posted May 7, 2008 Your html doesn't validate. It's unethical to put a "valid html code" button, when you have over 50 errors! Link to comment Share on other sites More sharing options...
darkfreaks Posted July 9, 2008 Share Posted July 9, 2008 Password type input with autocomplete The impact of this vulnerability Possible sensitive information disclosure How to fix this vulnerability The password autocomplete should be disabled in sensitive applications. To disable autocomplete, you may use a code similar to: <INPUT TYPE="password" AUTOCOMPLETE="off"> User credentials are sent in clear text The impact of this vulnerability A third party may be able to read the user credentials by intercepting an unencrypted HTTP connection. How to fix this vulnerability Because user credentials usually are considered sensitive information, it is recommended to be sent to the server over an encrypted connection. Link to comment Share on other sites More sharing options...
Recommended Posts