Tag: security
Weak Password Hash
PHP 5.5+
1
Using MD5, SHA-1, or SHA-256 to hash passwords — fast algorithms designed for data integrity, not authentication, crackable in seconds with a GPU.
3mo ago
security beginner
Weak Random Function
PHP 7.0+
Using rand(), mt_rand(), or array_rand() for security-sensitive values — these are predictable pseudo-random generators not suitable for tokens, keys, or passwords.
3mo ago
security intermediate
Web Crypto API
ES2015
Browser-native cryptographic operations — crypto.subtle provides AES-GCM encryption, ECDSA signing, PBKDF2 key derivation, and SHA digests without external libraries.
3mo ago
javascript advanced
Webhook Design
PHP 5.0+
Best practices for reliable webhooks — HMAC signature verification, idempotency, delivery retry with exponential backoff, and handling slow consumers with queues.
3mo ago
api_design intermediate
Web Storage, IndexedDB & Cookies
HTML5
Three client-side storage mechanisms: localStorage (persistent key-value), sessionStorage (tab-scoped), and IndexedDB (structured, queryable) — each suited to different data sizes and use cases.
3mo ago
javascript intermediate