Tag: security
🤖 AI Guestbook — #security educational data only
|
|
Last 30 days
Agents 128
Amazonbot 17Perplexity 10ChatGPT 6Scrapy 4Google 2SEMrush 1
ChatGPT 8Perplexity 7Amazonbot 7Google 2SEMrush 1Claude 1Scrapy 1
Amazonbot 1.3kChatGPT 1.1kPerplexity 979Google 519Ahrefs 464SEMrush 352Unknown AI 301Claude 221Meta AI 173Scrapy 168Bing 140Majestic 43Qwen 19Sogou 4DuckDuckGo 2
Most referenced — #security
Static Analysis 6Input Validation vs Output Encoding 5Penetration Testing 5filter_var() 4Threat Modelling 4CSRF Token Handling in Fetch & Axios 3Responsible Vulnerability Disclosure 3SSL/TLS Certificate Types 3
Input Validation vs Output Encoding 6Environment Variables 5CSRF Token Handling in Fetch & Axios 4password_verify() 3Secrets Management 3PDO 3Forward Secrecy 3Safe Mode — What It Was & Why It Failed 2
Type Coercion 190password_hash() — Native Bcrypt (PHP 5.5) 172CSRF Token Handling in Fetch & Axios 168preg_replace /e Modifier (Removed) 157allow_url_fopen / allow_url_include 115Responsible Vulnerability Disclosure 81PHP End-of-Life Schedule & Security Implications 76extract() — Dangerous Variable Injection 64
How they use it
crawler 5.2k
crawler_json 527
pre-tracking 84
Tag total5.8k pings
Terms pinged158 / 158
Distinct agents14
move_uploaded_file()
PHP 4.0+
PHP's function for safely relocating an uploaded file from the temporary directory to its final destination.
OWASP A5:2021
3mo ago
php intermediate
OAuth 2.0
PHP 7.0+ An authorisation framework that allows applications to obtain limited access to user accounts on third-party services without exposing passwords.
3mo ago
networking intermediate
openssl_encrypt()
PHP 7.1+
PHP's OpenSSL wrapper for symmetric encryption — use AES-256-GCM for authenticated encryption.
3mo ago
php advanced
password_hash()
PHP 5.5+
PHP's built-in function for securely hashing passwords using bcrypt or Argon2 with automatic salting.
3mo ago
php beginner
password_verify()
PHP 5.5+
Checks a plaintext password against a bcrypt/Argon2 hash produced by password_hash() — the correct way to validate passwords.
3mo ago
php beginner
PDO
PHP 5.1+ PHP Data Objects — a database abstraction layer supporting prepared statements across multiple database drivers.
3mo ago
php intermediate
Penetration Testing
PHP 5.0+
A simulated cyberattack against a system, conducted by security professionals, to identify exploitable vulnerabilities before attackers do.
3mo ago
general intermediate
PHAR Archives & Packaging
PHP 5.2+
PHP's native archive format for self-contained distributable applications — like a JAR file for Java — with a bootstrap stub and compressed contents.
3mo ago
php advanced
PHP Session
PHP 5.0+ Server-side storage keyed by a session ID cookie — the correct place to store authorisation state.
3mo ago
php beginner
PHP Stream Wrappers
PHP 5.0+
PHP's I/O abstraction layer — built-in wrappers like file://, php://, phar://, and http:// let file functions operate over any protocol.
3mo ago
php advanced
php.ini Security Settings
PHP 5.0+
5
Critical php.ini directives that harden PHP applications by disabling dangerous features and restricting runtime behaviour.
OWASP A5:2021
3mo ago
php intermediate
Principle of Least Privilege
PHP 5.0+
Every component should operate with the minimum permissions required to do its job — nothing more.
3mo ago
general intermediate
Public Key Infrastructure (PKI)
1
The system of certificate authorities, certificates, and protocols that establishes trust in public keys — enabling HTTPS, code signing, and email encryption at internet scale.
3mo ago
cryptography advanced
Rainbow Table
PHP 5.5+
A precomputed lookup table mapping hash values back to their original inputs — used to crack unsalted password hashes.
3mo ago
general intermediate
random_bytes()
PHP 7.0+
Generates cryptographically secure random bytes from the OS entropy source — use for tokens, salts, and nonces.
3mo ago
php intermediate
realpath()
PHP 5.0+
Resolves a path to its canonical absolute form, collapsing ../ sequences — used to prevent path traversal.
3mo ago
php intermediate
Regex Performance
Regex performance pitfalls — catastrophic backtracking (ReDoS), unnecessary captures, and poorly anchored patterns that scan more input than needed.
3mo ago
regex advanced
register_globals (Legacy Audit)
PHP 5.0+
A removed PHP setting that automatically created global variables from GET/POST/COOKIE input, enabling trivial variable injection attacks.
CWE-473 OWASP A3:2021
3mo ago
php beginner
9.8
Responsible Vulnerability Disclosure
The practice of privately reporting security vulnerabilities to vendors before publishing, allowing time for a fix.
3mo ago
general intermediate
SAST vs DAST vs IAST
PHP 5.0+
Three automated security testing approaches: SAST analyses source code without running it, DAST attacks a running app from outside, IAST instruments the app from within during testing.
3mo ago
security intermediate