Tag: security
Brute-Force Protection
Defences against automated credential-guessing attacks — rate limiting login attempts, account lockout, CAPTCHA, and multi-factor authentication to make guessing passwords computationally infeasible.
CWE-307 OWASP A7:2021
1mo ago
security intermediate
Block Cipher Modes PHP 7.1+
How a block cipher (AES) processes data larger than one block — ECB is insecure, CBC requires a MAC, GCM provides authenticated encryption and is the correct choice.
2mo ago
cryptography advanced
Business Logic Abuse
Exploiting flaws in application workflows rather than technical vulnerabilities — bypassing payment steps, abusing discount codes, manipulating quantity fields, or racing concurrent requests.
2mo ago
security advanced
basename() PHP 5.0+
Returns only the filename component of a path, stripping any directory prefix — a simple path traversal defence.
2mo ago
php beginner
bind_param() PHP 5.1+
MySQLi method that binds PHP variables to prepared statement parameters, preventing SQL injection.
2mo ago
php intermediate
Browser Storage APIs HTML5
localStorage, sessionStorage, IndexedDB, and cookies — different scopes, capacities, and access patterns for client-side data persistence.
2mo ago
frontend beginner
Bug Bounty Programme
A programme offering financial rewards to security researchers who responsibly disclose vulnerabilities in a vendor's systems.
2mo ago
general beginner