Tag: security
🤖 AI Guestbook — #security educational data only
|
|
Last 30 days
Agents 121
Amazonbot 16Perplexity 10ChatGPT 5Scrapy 4Google 2SEMrush 1
ChatGPT 8Perplexity 7Amazonbot 7Google 2SEMrush 1Claude 1Scrapy 1
Amazonbot 1.3kChatGPT 1.1kPerplexity 979Google 519Ahrefs 464SEMrush 351Unknown AI 301Claude 221Meta AI 173Scrapy 162Bing 140Majestic 43Qwen 19Sogou 4DuckDuckGo 2
Most referenced — #security
Static Analysis 6Penetration Testing 5Threat Modelling 4CSRF Token Handling in Fetch & Axios 3filter_var() 3Input Validation vs Output Encoding 3Responsible Vulnerability Disclosure 3SSL/TLS Certificate Types 3
Input Validation vs Output Encoding 6Environment Variables 5CSRF Token Handling in Fetch & Axios 4password_verify() 3Secrets Management 3PDO 3Forward Secrecy 3Safe Mode — What It Was & Why It Failed 2
Type Coercion 190password_hash() — Native Bcrypt (PHP 5.5) 172CSRF Token Handling in Fetch & Axios 168preg_replace /e Modifier (Removed) 157allow_url_fopen / allow_url_include 114Responsible Vulnerability Disclosure 81PHP End-of-Life Schedule & Security Implications 76extract() — Dangerous Variable Injection 64
How they use it
crawler 5.1k
crawler_json 527
pre-tracking 84
Tag total5.8k pings
Terms pinged158 / 158
Distinct agents14
Secret Rotation
The practice of periodically replacing cryptographic secrets, API keys, and credentials — limiting the window of exposure if a secret is compromised without triggering a breach.
3mo ago
devops intermediate
Secrets Management
1
Storing, distributing, and rotating credentials securely — using dedicated tools rather than .env files in version control or hardcoded values in source code.
3mo ago
security intermediate
serialize() / unserialize()
PHP 5.0+
PHP's native serialisation functions can trigger arbitrary code execution via magic methods when deserialising untrusted data.
CWE-502 OWASP A8:2021
3mo ago
php intermediate
9.8
session_regenerate_id()
PHP 5.0+
Generates a new session ID after login — the primary defence against session fixation attacks.
3mo ago
php intermediate
Shared Responsibility Model
The division of security responsibilities between the cloud provider and the customer — the provider secures the infrastructure; the customer secures what runs on it.
3mo ago
cloud intermediate
SSH Keys
Asymmetric cryptographic key pairs used for passwordless SSH authentication — the public key is placed on servers, the private key never leaves your machine.
3mo ago
linux beginner
Static Analysis
PHP 7.1+
2
Automated inspection of source code without execution to find type errors, security issues, dead code, and style violations.
3mo ago
general intermediate
strip_tags()
PHP 5.0+
Removes HTML and PHP tags from a string — not a reliable XSS defence on its own.
3mo ago
php intermediate
Superglobals ($_GET, $_POST, $_SERVER…)
PHP 5.0+
PHP's built-in global arrays that provide access to request data, environment, and server variables — all potentially attacker-controlled.
3mo ago
php beginner
Symmetric Encryption
PHP 7.2+
Encryption where the same key encrypts and decrypts data — fast and suitable for bulk data, but key distribution is the primary challenge.
3mo ago
cryptography advanced
Threat Modelling
PHP 5.0+ A structured analysis process for identifying security threats, attack vectors, and appropriate countermeasures during design.
3mo ago
general intermediate
TLS Handshake
2
The negotiation process between client and server that establishes an encrypted HTTPS connection, agreeing on cipher suites and exchanging keys.
3mo ago
networking intermediate
Type Coercion
PHP 7.0+
PHP's automatic conversion between types can produce unexpected comparison results, leading to logic bugs and security bypasses.
CWE-704 OWASP A3:2021
3mo ago
php intermediate
8.1
Web Storage, IndexedDB & Cookies
HTML5
Three client-side storage mechanisms: localStorage (persistent key-value), sessionStorage (tab-scoped), and IndexedDB (structured, queryable) — each suited to different data sizes and use cases.
3mo ago
javascript intermediate
Zero Trust
PHP 5.0+
Never trust, always verify — authenticate and authorise every request regardless of network location.
3mo ago
general intermediate
Input Validation vs Output Encoding
PHP 5.0+
Validation checks that input is acceptable; output encoding makes data safe for the context it's rendered in. Both are required.
3mo ago
general beginner
Prepared Statement
PHP 5.1+
A parameterised SQL query where data placeholders are bound separately from the query structure, preventing SQL injection.
3mo ago
php intermediate
Rate Limiting
PHP 5.0+
Restricting the number of requests a client can make in a given time window to prevent abuse, DoS, and credential stuffing.
CWE-770 OWASP A5:2021
3mo ago
performance intermediate