Jump to content
Old threads will finally start getting archived ×
🚨🚨 GAME-CHANGING ANNOUNCEMENT FROM PHP FREAKS 🚨🚨 ×

Recommended Posts

please check if all ok in the coding are ok and if any loops, also its only started will keep on upadting this topic when i keep adding more to the script. discussonline.in/milu

 

 

i have already proved that the server is mine on my earlier post hope i do not have to again?

Link to comment
https://forums.phpfreaks.com/topic/175817-test-pleace-my-new-edition/
Share on other sites

could use a Doctype transitional tag also

Javascipt Error:

permission denied call to method location.tostring

 

 

Access Me:SECCOMP attack

Fix: put the following in htacess file

RewriteCond %{REQUEST_METHOD} !^(GET|HEAD|OPTIONS|POST|PUT)
RewriteRule .* - [F]

 

do you have tokens on your session variables to guard against CSRF attacks?

CSRF PHP Tutorial

 

also it seems to be safe guarding against SECCOMP attacks the htaccess file but you got CSRF problems as well.

 

 

 

  • 3 weeks later...

after some obvious testing i realized i gave people the wrong code for the file itself.

Working Code:

 

RewriteEngine on
RewriteCond %{REQUEST_METHOD} !^(GET|HEAD|OPTIONS|POST|PUT)
RewriteRule .* - [F]

 

 

Also if you are using PHP_SELF in your form variables don't try to avoid it or PHP_URI. try to make it redirect to an exact url if you can. if not  there is a "band aid" fix you can do where you can use htmlspecialchars to filter PHP_URI or PHP_SELF.

 

 

×
×
  • Create New...

Important Information

We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.