Archive for the ‘PHP’ Category

PHP Multibyte Shell Command Escaping Bypass Vulnerability

Wednesday, May 7th, 2008

In PHP there exist two functions to escape shell commands or arguments to shell commands that are used in PHP applications to protect against shell command injection vulnerabilities. - escapeshellcmd() - escapeshellarg() Unfortunately it was discovered that both functions fail to protect against shell command injection when the shell uses a locale with ...

PHP Weak Random Number Seed Vulnerability

Wednesday, May 7th, 2008

Since version 4.2.0 PHP automatically seeds the random number generators on the first usage of rand() and mt_rand(). This is done with the help of the GENERATE_SEED() macro. Unfortunately it was discovered that the GENERATE_SEED() macro contains several problems that can lead to a weaker seed than expected. In the worst ...

PHP 5.2.6 plugs security holes

Friday, May 2nd, 2008

The developers of the PHP scripting language have issued Version 5.2.6, which fixes numerous bugs and plugs some security holes. The changes are comprehensive, including bug fixes to modules that link to third-party products. PHP 5.2.6 also rectifies several flaws that could have caused a crash. The developers have eliminated errors ...

From PHP-Nuke to Wordpress

Saturday, March 8th, 2008

I just converted most of the site over to Wordpress. I did not copy over all 1400+ news articles. That would have taken days. But I did copy over the important stuff this afternoon. So that explains why all the previous posts are all dated today even though the news ...

An Introduction to PHP

Saturday, March 8th, 2008

This article introduces you to PHP. You will learn how it came about, what it looks like, and why it is the best server-side technology. It also exposes the most important features of the language. PHP began as a simple macro replacement tool. Like a nice pair of shoes, it got ...

What to Expect in PHP 5.0

Saturday, March 8th, 2008

This article is split up into two parts ? Life before PHP 5.0 and the future with PHP 5.0. This will hopefully exemplify how PHP has developed into the powerhouse that it is today. Most people enjoy programming with PHP because it is efficient and open-source. We all know that ...