:: Backends RSS
:: Forum
:: Links
:: Articles
:: Scripts
:: Downloads
:: Submit news
:: Promote us
:: Team
:: Mail us
:: Presse
PHPSecure II

When release the trilogy ?
Perfect remake
Boring ..
It isn't a good job
                   


Search SecurePHP

DMOZ ODP Search
Search with phpODP :

 «? phpsecure(); ?»
Last holes
ZEEWAYS ZeeJobsite "advance_search.php" HTML Injection Issue (8hits) 2010-07-31
A Developer's Look at ExpressionEngine 2 (9hits) 2010-07-30
Bugtraq: Day of bugs in WordPress 2 (9hits) 2010-07-30
ViArt CMS "admin_articles.php" Cross-Site Scripting Issue (10hits) 2010-07-30
Kayako eSupport "functions.php" SQL Injection (12hits) 2010-07-30
Pligg "search.php" Cross-Site Scripting (13hits) 2010-07-30
Vuln: PHP Traverser 'mp3_id.php' Remote File Include Vulnerabi... (12hits) 2010-07-30
SPIP "var_login" Parameter Cross Site Scripting Vulnerability (10hits) 2010-07-29
Vuln: Whizzy CMS 'whizzycms1001.php' Local File Include Vulner... (11hits) 2010-07-29
Bugtraq: PBBooking 1.0.4_3 Joomla Component Multiple Blind SQL... (12hits) 2010-07-29
BrotherScripts Scripts Directory "info.php" SQL Injection (12hits) 2010-07-29
ConPresso CMS "mod_search/index.php" Multiple Cross-Site Scrip... (13hits) 2010-07-29
Bugtraq: PhotoMap Gallery 1.6.0 Joomla Component Multiple Blin... (15hits) 2010-07-28
DeDeCMS "rss.php" SQL Injection Issue (16hits) 2010-07-28
phpwcms "phpwcms.php" Cross-Site Scripting Issue (19hits) 2010-07-28
gpEasy CMS "admin_password.php" Remote File Include Issue (16hits) 2010-07-28
Bugtraq: [MajorSecurity SA-079]PHPKIT WCMS - Multiple stored C... (16hits) 2010-07-27
Bugtraq: TTVideo 1.0 Joomla Component SQL Injection Vulnerability (17hits) 2010-07-27
Joomdle for Joomla "course_id" Remote SQL Injection Vulnerability (15hits) 2010-07-27
Visites for Joomla "mosConfig_absolute_path" File Inclusion Vu... (16hits) 2010-07-27
Calendarix "cal_cat.php" SQL Injection (19hits) 2010-07-27
vBulletin FAQ Database Credentials Disclosure Vulnerability (20hits) 2010-07-26
Joomla! Multiple Cross Site Scripting and SQL Injection Vulner... (22hits) 2010-07-26
PHP Security Update Fixes Multiple Memory Corruption Vulnerabi... (23hits) 2010-07-26
Vuln: Bitrix Site Manager Remote File Include Vulnerability (10hits) 2010-07-24
Vuln: Intellectual Property Joomla! Component 'id' Parameter S... (23hits) 2010-07-24
Vuln: Huru Helpdesk Joomla! Component 'cid[0]' Parameter SQL I... (15hits) 2010-07-24
Green Desktiny "news_detail.php" SQL Injection (25hits) 2010-07-23
Softwex CMS "news_details.php" SQL Injection Issue (25hits) 2010-07-23
Drupal Hierarchical Select Module Multiple Unspecified HTML In... (27hits) 2010-07-23
EdgePHP CBQuick "search" Parameter SQL Injection and Cross-Sit... (26hits) 2010-07-23
RunCms "magpie_debug.php" Cross-Site Scripting Issue (25hits) 2010-07-23
AuroraCMS "content.php" SQL Injection (24hits) 2010-07-23
kandalf upper "upper.php" Arbitrary File Upload Issue (19hits) 2010-07-23
PG Social Networking "myprofile.php" Arbitrary File Upload (26hits) 2010-07-23
Vuln: phpMyFAQ Search Page Cross Site Scripting Vulnerability (20hits) 2010-07-23
Vuln: vBulletin 'faq.php' Information Disclosure Vulnerability (19hits) 2010-07-23
Vuln: Cacti Multiple Cross Site Scripting Vulnerabilities (19hits) 2010-07-23
Bugtraq: vBulletin - Critical Information Disclosure (14hits) 2010-07-23
Vuln: Openads (phpAdsNew) 'lib-remotehost.inc.php' Remote File... (18hits) 2010-07-22
PHP Chat Module for 123 Flash Chat Local File Inclusion Vulner... (22hits) 2010-07-22
EZ-Oscommerce Arbitrary File Creation and Upload Vulnerabilities (18hits) 2010-07-22
PHP-Nuke "Web_Links" Module SQL Injection Issue (24hits) 2010-07-22
I-Escorts Directory Script "country_escorts.php" SQL Injection... (26hits) 2010-07-22
Datenator "event.php" SQL Injection Issue (20hits) 2010-07-21
MediaWiki Login Interface Cross-Site Request Forgery Issue (21hits) 2010-07-21
Podcast Generator "download.php" Directory Traversal (21hits) 2010-07-21
PSnews "id" Parameter Multiple SQL Injection Vulnerabilities (23hits) 2010-07-21
PHP-Nuke "Your_Account" Module SQL Injection (21hits) 2010-07-21
phpFK - PHP Forum Script ohne MySQL "upload.php" Arbitrary Fil... (29hits) 2010-07-21
Yappa "yappa.php" Multiple Remote Command Execution Vulnerabil... (25hits) 2010-07-21
weenCompany "index.php" SQL Injection (26hits) 2010-07-20
CMS Made Simple "default_cms_lang" Parameter Local File Includ... (28hits) 2010-07-20
Simple Document Management System "detail.php" SQL Injection (28hits) 2010-07-20
Event Horizon "modfile.php" Multiple SQL Injection Vulnerabili... (25hits) 2010-07-20
Vuln: Kayako eSupport 'functions.php' SQL Injection Vulnerability (21hits) 2010-07-20
pragmaMX "modules.php" Multiple SQL Injection Vulnerabilities (28hits) 2010-07-20
Green Shop "index.php" SQL Injection (31hits) 2010-07-20
Koobi "index.php" SQL Injection (26hits) 2010-07-20
WordPress WP-UserOnline URL HTML Injection Issue (36hits) 2010-07-17
Vuln: Joomla! HTML Injection and SQL Injection Vulnerabilities (24hits) 2010-07-17
phpwcms "calendardate" Parameter Cross Site Scripting Vulnerab... (36hits) 2010-07-16
Oxygen "post.php" SQL Injection Issue (32hits) 2010-07-15
Orbis CMS "editor-body.php" Cross-Site Scripting Issue (40hits) 2010-07-15
Pointter PHP Micro-Blogging Social Network "showphoto.php" Loc... (34hits) 2010-07-15
Vuln: Koobi 'index.php' SQL Injection Vulnerability (27hits) 2010-07-15
Dren's PHP Uploader "index.php" Remote File Upload Issue (36hits) 2010-07-14
Online Guestbook Pro "ogp_show.php" Multiple Input Validation (41hits) 2010-07-14
iScripts ReserveLogic "packagedetails.php" SQL Injection (38hits) 2010-07-14
Gallery Plugin for EQdkp-Plus "pid" SQL Injection Vulnerability (41hits) 2010-07-13
System CMS Contentia "news.php" SQL Injection (35hits) 2010-07-13
BrotherScripts Business Directory "info.php" SQL Injection Issue (40hits) 2010-07-13
Zoph Multiple Cross-Site Scripting Issues (41hits) 2010-07-13
iScripts CyberMatch "profile.php" SQL Injection (42hits) 2010-07-13
MyHome for Joomla "nidimm" Parameter SQL Injection Vulnerability (36hits) 2010-07-12
redSHOP for Joomla "pid" Parameter SQL Injection Vulnerability (33hits) 2010-07-12
Edge PHP Clickbank Affiliate Marketplace Script SQL Injection ... (31hits) 2010-07-12
Vuln: Joomla! EasyBlog HTML Injection Vulnerability (30hits) 2010-07-12
Vuln: Joomla! Health & Fitness Stats Component Multiple HTML I... (32hits) 2010-07-12
Softbiz PHP Shopping Cart Software "cid" SQL Injection Vulnera... (35hits) 2010-07-11
Bugtraq: Vulnerabilities in SimpNews (29hits) 2010-07-11
2daybiz Polls Script "searchvote.php" SQL Injection (40hits) 2010-07-09
Simple File Manager "filename" Parameter Directory Traversal (49hits) 2010-07-09
CANDID "view.php" SQL Injection and Cross-Site Scripting (48hits) 2010-07-09
AbleSpace "news.php" SQL Injection Issue (41hits) 2010-07-09
V-EVA Classified Script "classified_img.php" SQL Injection (51hits) 2010-07-09
Drupal Case Tracker Module Security Bypass and HTML Injection (41hits) 2010-07-09
AutarTimonial for Joomla "limit" Remote SQL Injection Vulnerab... (35hits) 2010-07-08
NeoRecruit for Joomla "Itemid" Remote SQL Injection Vulnerability (35hits) 2010-07-08
eBay Clone Script 2010 "showcategory.php" SQL Injection (35hits) 2010-07-08
Multiple Image Upload Module For Drupal Security Bypass (41hits) 2010-07-08
2daybiz Matrimonial Script "smartresult.php" SQL Injection (41hits) 2010-07-08
TaskFreak! "login.php" SQL Injection Issue (38hits) 2010-07-08
activeCollab "index.php" Local File Include (33hits) 2010-07-08
My Top 10 Most Useful Joomla Components (29hits) 2010-07-08
Bugtraq: RunCMS XSS Vulnerability via User Agent (34hits) 2010-07-08
Bugtraq: MODx Installation File XSS Vulnerability (25hits) 2010-07-08
Bugtraq: ArtForms 2.1b7.2 RC2 Joomla Component Multiple Remote... (32hits) 2010-07-08
BookLibrary From Same Author for Joomla SQL Injection Vulnerab... (37hits) 2010-07-07
ATutor Admin Interface Cross Site Request Forgery Vulnerability (38hits) 2010-07-07
Snipe Gallery "image.php" SQL Injection (36hits) 2010-07-07
Customer Paradigm PageDirector "result.php" SQL Injection (36hits) 2010-07-07
Grafik CMS "admin.php" SQL Injection and Cross-Site Scripting (38hits) 2010-07-07
i-Net Online Community Site Script "profile_social.php" SQL In... (34hits) 2010-07-07
AdaptCMS "init.php" Remote File Include Issue (55hits) 2010-07-07
Zoph Multiple Parameter Processing Cross Site Scripting Vulner... (37hits) 2010-07-05
TCW PHP Album SQL Injection and Cross Site Scripting Vulnerabi... (46hits) 2010-07-05
SEF404x (com_sef) for Joomla "controller" Local File Inclusion... (44hits) 2010-07-05
Setiran CMS "id" Parameter Remote SQL Injection Vulnerability (39hits) 2010-07-05
Seyret for Joomla "view" Parameter Local File Inclusion Vulner... (31hits) 2010-07-05
AddressBook for Joomla "Itemid" Remote SQL Injection Vulnerabi... (36hits) 2010-07-05
2daybiz B2B Portal Script "selling_buy_leads1.php" SQL Injection (38hits) 2010-07-05
OpenEMR "new_comprehensive_save.php" Multiple HTML Injection V... (43hits) 2010-07-05
i-Net Multi User Email Script "php121_editname.php" SQL Injection (35hits) 2010-07-05
Bugtraq: Canteen Joomla Component 1.0 Multiple Remote Vulnerab... (29hits) 2010-07-05
...More
Less

PHP Advisories/Bugs/Vulns frequency for this month

0 0 0 0 100 71160 25534120 0 8751230 354561
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31


 Mailing-list phpAdvisories 
Daily basis
Subscribe [phpAdvisories-subscribe@]
Unsubscribe [phpAdvisories-unsubscribe@]
Weekly basis
Subscribe [users-subscribe@]
Unsubscribe [users-unsubscribe@]

Site Event by Cloud
PHPSecAuth

PHPSecAuth is a library written in PHP which allows you to protect your authentication system for your website or your intranet. It allows to detect many attacks (brute force, sql injection, buffer overflow ...) like an IDS, blocks the attacker and send an email to the administrator or writes logs.

Moreover PHPSecAuth can be used to limit the access of the website in the time, limiting the day

http://phpsecauth.linux-fr.info
phpsecauth.linux-fr.info
 
Last article: Injections PHP/MySQL (2)

En plus de compléter l'article précédent sur l'injection MySQL et grâce à ses explications sur l'utilisation d'UNION, ce deuxième texte apporte de nouvelles techniques d'injection, ainsi que des éléments de sécurisation.

Injections PHP/MySQL (2)..

Injections PHP/MySQL (1)..
Injection d'headers dans la fonction mail()
Email Headers Injection with PHP
PHPSecure News


mercredi 22 octobre
Seven habits for writing secure PHP applications
When it comes to security, remember that in addition to actual platform and operating system security issues, you need to ensure that you write your application to be secure. These seven habits for writing more secure P
by Solrac


PHP cURL Functions Let Scripts Byass the 'open_basedir' Directory Restrictions
Downloads on PostNuke.com Target of Hacker: Immediate Action Required if You've Downloaded PostNuke in the Past Three Days
Overwrite $_FILE array in rfc1867 - Mime multipart/form-data File
Vulnerability in php 5.0.1 and >= 4.1.2
Hardened-PHP
PHP Session Security
AllMyGuests PHP Code Injection vulnerability proof of concept
(My)SQL Injection under PHP


lundi 20 décembre
New site: PHP-Help.net
PHP-Help.net is born today, a few days before Christmas. Its main goal will be to build a database of explained PHP source codes. The site is dedicated to both beginners and confirmed PHP developers: It will bring to
by Matt


The SANS Top 20 Internet Security Vulnerabilities
Smarty & SQL tutorial
LinusTorvalds discusses: Linux is not a political sect...
Mosaic, 10 years already!
Easy installation of Apache2, PHP 4.3.1 and MySQL 4 pennies MacOS X
Conference PHP in May
claced
International PHP Conference


lundi 23 juin
Lou Portail 2.2 released
Lou portail 2.2 is released with a lot of innovation. + Management of gallery with creation of vignette using GD2 + Statistics block improved + Setup script improved + Management of comments of partners + 10 new c
by charlie


PHP Final 0.6.11(b2) released
PHP-Nuke 6.6
Portailphp 1.2 ready !
rPortal alpha 0.4.4 released
phpSlash 0.7.1 released
rPortal alpha 0.4.3 released
PHPNuke 6.5 released
Lou Portail 2.1.1 released


samedi 25 mars
New PhpED 4.5 is released
NuSphere released PhpED 4.5, the next version of the innovative PHP Development Environment. New features are: - Customizable Multi-Level Highlighting now supporting PHP4, PHP5, XML, XHTML, HTML, CSS, Perl, Python, J
by Ann Blanter


NuSphere PhpED 4.0 is released
phpMyVisites, a statistic tool using php/mysql
phpCap new Version Released !
Ovidentia MP released !
TinyButStrong 1.81 released
iXmail V0.4 released
WAnewsletter 2.1.4 Stable Released
TPLN 1.5 released
  Submit a news
  News browser
  Post last news on your site
English News of web about PHP
DP_Access_MySQL_database samedi 31 juillet
class Graph samedi 31 juillet
ZEEWAYS ZeeJobsite "advance_search.php" HTML Injection Issue vendredi 30 juillet
A Developer's Look at ExpressionEngine 2 vendredi 30 juillet
Bugtraq: Day of bugs in WordPress 2 vendredi 30 juillet
Firewall Protection vendredi 30 juillet
Router vendredi 30 juillet
ViArt CMS "admin_articles.php" Cross-Site Scripting Issue jeudi 29 juillet
Pligg "search.php" Cross-Site Scripting jeudi 29 juillet
Kayako eSupport "functions.php" SQL Injection jeudi 29 juillet
The PHP Content Management/Framework Upgrades in ExpressionEngine 2 jeudi 29 juillet
Vuln: PHP Traverser 'mp3_id.php' Remote File Include Vulnerability jeudi 29 juillet
SPIP "var_login" Parameter Cross Site Scripting Vulnerability jeudi 29 juillet
Bugtraq: PBBooking 1.0.4_3 Joomla Component Multiple Blind SQL Injection jeudi 29 juillet
Vuln: Whizzy CMS 'whizzycms1001.php' Local File Include Vulnerability jeudi 29 juillet
  News browser

Copyright ©+ 2004 phpsecure.info - All the team - Coded by Charlie & tobozo
- All rights reserved - DeZign by PWD
- Powered By phpSecure(); Version 2.0 - Changelog -

phpSecure belongs to webring PHP Francophone
[ Join the network | Sites of Webring | Sites randomly | << Précédent | Next >> ]


Hardened-php adds security hardening features to PHP to protect your servers on the one hand against a number of well known problems in hastily written PHP scripts and on the other hand against potential unknown vulnerabilities within the engine itself.

phpCap was originally a light implementation of the libpcap which provides an acces to all the pcap functions, but it has been upgrade with a set of functions to break down, make and send custom network packets.

Class:safeSQL - An SQL query processer to automate the tedious tasks of syntax testing, injection attack-proofing, dropping parts of queries and other misc features. It has only been tested with MySQL syntax, but any ANSI SQL-92 compliant db library should work OK.

Class:sql_inject - This class is meant to search in your SQL data values for special characters that may change the meaning of your SQL data and execute actions that may compromise the security of servers.

Top 10 Links

÷ KillerProtection
÷ phpforge
÷ PY-Membres
÷ ALP - Banner Ad
÷ phpMyNewsletter
÷ PhenHP Album
÷ LokwaBB
÷ CuteNews
÷ Avotravis
÷ Kietu





















Online: