Tag: security
🤖 AI Guestbook — #security educational data only
|
|
Last 30 days
Agents 128
Amazonbot 17Perplexity 10ChatGPT 6Scrapy 4Google 2SEMrush 1
ChatGPT 8Perplexity 7Amazonbot 7Google 2SEMrush 1Claude 1Scrapy 1
Amazonbot 1.3kChatGPT 1.1kPerplexity 979Google 519Ahrefs 464SEMrush 352Unknown AI 301Claude 221Meta AI 173Scrapy 168Bing 140Majestic 43Qwen 19Sogou 4DuckDuckGo 2
Most referenced — #security
Static Analysis 6Input Validation vs Output Encoding 5Penetration Testing 5filter_var() 4Threat Modelling 4CSRF Token Handling in Fetch & Axios 3Responsible Vulnerability Disclosure 3SSL/TLS Certificate Types 3
Input Validation vs Output Encoding 6Environment Variables 5CSRF Token Handling in Fetch & Axios 4password_verify() 3Secrets Management 3PDO 3Forward Secrecy 3Safe Mode — What It Was & Why It Failed 2
Type Coercion 190password_hash() — Native Bcrypt (PHP 5.5) 172CSRF Token Handling in Fetch & Axios 168preg_replace /e Modifier (Removed) 157allow_url_fopen / allow_url_include 115Responsible Vulnerability Disclosure 81PHP End-of-Life Schedule & Security Implications 76extract() — Dangerous Variable Injection 64
How they use it
crawler 5.2k
crawler_json 527
pre-tracking 84
Tag total5.8k pings
Terms pinged158 / 158
Distinct agents14
bind_param()
PHP 5.1+
MySQLi method that binds PHP variables to prepared statement parameters, preventing SQL injection.
3mo ago
php intermediate
Browser Storage APIs
HTML5
localStorage, sessionStorage, IndexedDB, and cookies — different scopes, capacities, and access patterns for client-side data persistence.
3mo ago
frontend beginner
Bug Bounty Programme
A programme offering financial rewards to security researchers who responsibly disclose vulnerabilities in a vendor's systems.
3mo ago
general beginner
Container Security
PHP 5.0+ Security practices for building and running containers — minimal base images, non-root users, read-only filesystems, image scanning, and runtime security controls.
3mo ago
devops intermediate
CORS
PHP 5.0+ Cross-Origin Resource Sharing — the browser mechanism that controls which cross-origin requests are permitted, using HTTP headers negotiated between client and server.
3mo ago
networking intermediate
Defence in Depth
PHP 5.0+ Layering multiple independent security controls so that bypassing one does not compromise the whole system.
3mo ago
general intermediate
Digital Signatures
PHP 5.0+
5
Cryptographic proof that data was created by the holder of a private key and has not been altered — providing authentication, integrity, and non-repudiation.
3mo ago
cryptography advanced
Dynamic Analysis (DAST)
Testing a running application by sending crafted inputs to discover vulnerabilities that only manifest at runtime.
3mo ago
general intermediate
Email Deliverability
PHP 5.0+ The technical requirements for email reaching inboxes rather than spam folders — SPF, DKIM, DMARC, and sending reputation work together to authenticate your emails.
3mo ago
networking intermediate
Encryption at Rest
PHP 7.0+ Encrypting stored data so that physical access to storage media does not expose plaintext — protecting against data theft from stolen drives, decommissioned hardware, and storage breaches.
3mo ago
cryptography advanced
Entropy
PHP 7.0+
A measure of unpredictability in a value — high entropy means many possible values, making brute-force infeasible.
3mo ago
general intermediate
escapeshellarg()
PHP 5.0+
Wraps a string in single quotes and escapes internal quotes for safe use as a single shell argument.
3mo ago
php intermediate
extract() — Dangerous Variable Injection
PHP 4.0+
extract() creates local variables from an array, allowing attackers to overwrite existing variables if input is unsanitised.
CWE-621 OWASP A3:2021
3mo ago
php beginner
9.8
filter_var()
PHP 5.2+
PHP's built-in input validation and sanitisation function supporting email, URL, IP, int, and float validators.
3mo ago
php beginner
hash_equals()
PHP 5.6+
Constant-time string comparison that prevents timing attacks when validating tokens and CSRF values.
3mo ago
php intermediate
htmlspecialchars()
PHP 5.0+
Converts HTML special characters to entities — the primary defence against XSS in HTML output contexts.
3mo ago
php beginner
HTTP Security Headers Checklist
A set of response headers that instruct browsers to enforce security policies — CSP, HSTS, X-Frame-Options, X-Content-Type-Options, and Permissions-Policy.
3mo ago
security intermediate
JWT Deep Dive
PHP 7.0+
JSON Web Tokens carry signed (or encrypted) claims — three Base64url-encoded sections: header.payload.signature. Security depends entirely on algorithm choice and verification correctness.
3mo ago
cryptography advanced
Key Derivation Functions
PHP 5.5+
KDFs (PBKDF2, bcrypt, scrypt, Argon2) derive a cryptographic key from a password by being intentionally slow — making brute-force attacks computationally infeasible.
3mo ago
cryptography advanced
mime_content_type()
PHP 5.3+
Detects the actual MIME type of a file by inspecting its content — not its extension or the browser-reported type.
3mo ago
php intermediate