Few people really mind security matters before anything bad happens to them. Once they get to feel how it is to lose data or give away precious information due to security faults, they begin to get more concerned over protecting their data. When it comes to websites, SQL security is one of the most important thing that haunts them. Of course, the most important one, is the php/asp or whatever code it uses.
This is a guest post by Nadeem S. aka Kr0w, thanx !
Cross Site Scripting, also known as XSS is a type of vulnerability which allows for client-sided JavaScript execution. XSS can be exploited in a variety of ways, such as stealing cookies and other information to be used in different scenarios. XSS vulnerabilities are made possible by the coder of the web application or script in question not sanitizing the user input correctly and printing out the injected JavaScript straight to the page.
![dynamite[11] dynamite[11]](http://www.codercaste.com/wp-content/uploads/2009/10/dynamite11.jpg)
This is a guest post by Nadeem S. aka Kr0w, thank you Nadeem !
By embedding NULL Bytes/characters into applications that do not handle postfix NULL terminators properly, an attacker can exploit a system using techniques such as Local File Inclusion. (Local File Inclusion is a vulnerability that exists on Windows, regardless of the type of webserver used. It enables malicious users to include files, readable by the webserver and located on the same volume and execute PHP contained within those files. Also, an attacker may also be able to inject PHP code into the webserver logs, leading to code execution even if no upload was executed).
We have all probably once be presented with a computer virus in our system. Well, it’s more precise to say that we were presented with malicious code, since as you’ll see not everything is classified as a virus.
But who created the first computer virus and when? To be sincere, this is not known for sure and there are a couple of different opinions about that. However, it seems that the first one was written at about 1965-1975 and even the creator probably didn’t create it with destruction in mind.
Nowadays, many people tend to use wireless connections since utp cables are sometimes not acceptable. When their routers become access points, too few of them are properly protected. Most of them tend to use WEP as a means to protect their internet connection. Well, this is surely better than leaving the connection without any key, but it’s still not enough. From now on you’re highly adviced to use WPA2 for your internet connection security and you’ll shortly see why