Posts

Blind XSS Impact

What is Blind XSS? Blind XSS is a flavor of cross-site scripting (XSS), where the attacker “blindly” deploys a series of malicious payloads on web pages that are likely to save them to a persistent state (like in a database, or in a log file). Then, without knowing any details about where the payloads have ended up, or if (and when) they are going to be executed, the attacker waits for the payloads to be pulled out of storage and rendered on a web page loaded by a user. Hence, unlike most XSS attacks, which are non-persistent, and rely on immediate response pages generated from the data input by the attacker in a web form or HTTP query, Blind XSS is a persistent type of XSS that relies on vulnerabilities in the code of the target web pages, which allow malicious scripts, inserted into web controls, to be saved by the server in a database or web site file. These are then “served” to other users as part of HTML page responses, without begin “sanitized” first. The distinction of the B...

Started with PHP 1

  Setting Local Web Server PHP script executes on a web server running PHP. So before you start writing any PHP program you need the following program installed on your computer. 1)The Apache Web server 2)The PHP engine 3)The MySQL database server You can either install them individually or choose a pre-configured package for your operating systems like Linux and Windows. Popular pre-configured packages are XAMPP and WampServer. WampServer is a Windows web development environment. It allows you to create web applications with Apache2, PHP, and a MySQL database. It will also provide the MySQL administrative tool PhpMyAdmin to easily manage your databases using a web browser. First PHP Script Now that you have successfully installed WampServer on your computer. In this section, we will create a very simple PHP script that displays the text "Hello, world!" in the browser window. Ok, click on the WampServer icon somewhere on your Windows taskbar and select the "www directory...

PHP Concepts

What is PHP? PHP stands for "PHP: Hypertext Preprocessor". Initially it was called "personal home page" PHP is an opensource.PHP cost nothing, it is free to download and use PHP is a scripting language designed for web. PHP works with the web server. Ex: Apache, IIS, nginx etc which means that PHP scripts, or programs, usually run on a Web PHP is an HTML-embedded scripting language. Much of its syntax is borrowed from C, Java and Perl. So if you have experience with this language, you will be comfortable with php PHP is a one of the most popular Web programming languages. Using PHP we can build dynamic, interactive Web sites Syntax See the below table to get the opening and closing tags of php Opening Tag Closing Tag <?php ?> <? ?> (Short Tag) <script language='php'> </script> PHP File PHP document with an extension of  .php PHP file contains HTML, CSS, javascript, user text, and php code PHP code is parsed on the server. This method ...

PHP Introduction

PHP started as a small open source project that evolved as more and more people found out how useful it was. Rasmus Lerdorf unleashed the first version of PHP way back in 1994. PHP is a recursive acronym for "PHP: Hypertext Preprocessor". 1) PHP is a server-side scripting language that is embedded in HTML. It is used to manage dynamic content, databases, session tracking, and even build entire e-commerce sites. 2) It is integrated with a number of popular databases, including MySQL, PostgreSQL, Oracle, Sybase, Informix, and Microsoft SQL Server. 3) PHP is pleasingly zippy in its execution, especially when compiled as an Apache module on the Unix side. The MySQL server, once started, executes even very complex queries with huge result sets in record-setting time. 4) PHP supports a large number of major protocols such as POP3, IMAP, and LDAP. PHP4 added support for Java and distributed object architectures (COM and CORBA), making n-tier development a possibility for the first t...

History of PHP

History of PHP PHP as it's known today is actually the successor to a product named PHP/FI. Created in 1994 by Rasmus Lerdorf, the very first incarnation of PHP was a simple set of Common Gateway Interface (CGI) binaries written in the C programming language. Originally used for tracking visits to his online resume, he named the suite of scripts "Personal Home Page Tools," more frequently referenced as "PHP Tools." Over time, more functionality was desired, and Rasmus rewrote PHP Tools, producing a much larger and richer implementation. This new model was capable of database interaction and more, providing a framework upon which users could develop simple dynamic web applications such as guestbooks. In June of 1995, Rasmus » released the source code for PHP Tools to the public, which allowed developers to use it as they saw fit. This also permitted - and encouraged - users to provide fixes for bugs in the code, and to generally improve upon it. In September of t...

Gray Hat Hacker

A grey hat programmer (additionally spelled grey hat programmer) is somebody who might abuse moral norms or standards, however without the malignant purpose attributed to dark cap programmers.  Grey hat programmers might participate in rehearses that appear to be not exactly totally above board, yet are frequently working for the benefit of everyone. Grey hat programmers address the center ground between white cap programmers, who work for the benefit of those keeping up with secure frameworks, and dark cap programmers who act vindictively to abuse weaknesses in frameworks. On the off chance that we consider white caps the police and the dark caps as crooks, then, at that point, the grey hats fill in as the marginally underhand investigator. Dark cap programmers are something of a wise guy; illicitly breaking and going into specialized frameworks similarly to a dark cap, however treating the material they find as a white cap.  This could mean passing on a supportive note on th...

E-commerce SEO

  Ecommerce keyword research Keyword research is the critical first step in an e-commerce SEO campaign.   You’ll target keywords too difficult to rank for and won’t make it to page one. You’ll rank for keywords that don’t garner traffic or cause customers to buy. Neither of these situations is ideal, which is why e-commerce keyword research is so important — it will ensure you target keywords that are easy to rank for, have decent search volume, and have high conversion rates. However, there is more to choosing keywords than simply looking at how difficult it is to rank or how many people search for them. The following four options can help you to perform e-commerce keyword research, find keyword difficulty (KD) and search volume, and uncover buyer intent:  Right keywords Unless you use a tool like Ahrefs, you likely won’t have keyword data for the phrases you picked. You need to determine keyword difficulty, search volume, and buyer intent to know which keywords to use. ...