Search Results

Search found 13911 results on 557 pages for 'browser addons'.

facebook twitter digg google delicious technorati stumbleupon myspace wordpress linkedin gmail igoogle windows live tumblr viadeo yahoo buzz yahoo mail yahoo bookmarks favorites email print

Page 309/557 | < Previous Page | 305 306 307 308 309 310 311 312 313 314 315 316  | Next Page >

  • session fixation

    - by markiv
    Hi All, I am new to web development, and trying to get a hold on security issues. I went through this article on http://guides.rubyonrails.org/security.html these are some of the steps the author has mentioned how an attacker fixes session. 1. The attacker creates a valid session id: He loads the login page of the web application where he wants to fix the session, and takes the session id in the cookie from the response (see number 1 and 2 in the image). 2. He possibly maintains the session. Expiring sessions, for example every 20 minutes, greatly reduces the time-frame for attack. Therefore he accesses the web application from time to time in order to keep the session alive. 3. Now the attacker will force the user’s browser into using this session id (see number 3 in the image). As you may not change a cookie of another domain (because of the same origin policy), the attacker has to run a JavaScript from the domain of the target web application. Injecting the JavaScript code into the application by XSS accomplishes this attack. Here is an example: <script>?document.cookie="_session_id=16d5b78abb28e3d6206b60f22a03c8d9";?</script>. Read more about XSS and injection later on. 4. The attacker lures the victim to the infected page with the JavaScript code. By viewing the page, the victim’s browser will change the session id to the trap session id. 5. As the new trap session is unused, the web application will require the user to authenticate. 6. From now on, the victim and the attacker will co-use the web application with the same session: The session became valid and the victim didn’t notice the attack. I dont understand couple of points. i) why is user made to login in step5, since session is sent through. ii) I saw possible solutions on wiki, like user properties check and others why cant we just reset the session for the user whoever is login in when they enter username and password in step5? Thanks in advance Markiv

    Read the article

  • Want to disable flash caching ?

    - by Mina Samy
    Hi all I have a .swf flash gallery that loads pics from a XML file the probelm is when I modify the XML the modifications do not reflect on the flash till I delete the browsing cache from the browser I tried to disable caching using code like this Response.Cache.SetCacheability(HttpCacheability.NoCache); Response.AddHeader("Pragma","no-cache"); Response.Expires = -1; but not working is there any workaround for this ? thanks

    Read the article

  • gridview select problem

    - by jame
    work on vs05 asp.net .....My gridview have 10 rows .After select a gridview row ,my browser scroll up on gridview header ......i want scroll don't move....how to set scroll fixed on selected row

    Read the article

  • Why is caching such an issue in .net 3.5?

    - by user279521
    Has anyone else having an issue with browser caching when using .net? I am using VS 2008 and IE8. And I include all the recommended code to ensure that there is no caching, still 20% of the time, I get cached values. This was never an issue with classic asp. Any ideas?

    Read the article

  • CMS Layout Problem

    - by Sebi
    I made a small page (http://www.ovlu.li) using CMS Made Simple (http://www.cmsmadesimple.org/). It looks more or less okay in all browser, but the problem is, if a resize the window to a smaller size, sometimes the layout of the subnavigation layer is destroyed. Instead of getting smaller, all the elements are ordered more or less randomly. Any hints why?

    Read the article

  • hidden post parameter , php curl

    - by Michael
    I'm trying to replicate the browser post parameters on http://www.ebayclassifieds.com/m/PostAd?scrid=3465450-2253858851033189948 but for some reasons I can't find where the values for 2 of them are comming from . The parameters are btn-previwe-ad.x and btn-previwe-ad.y but I can't find such as parameters in the html source itself or any hidden value.

    Read the article

  • What do you do when a client ask for a feature which is a really bad idea?

    - by TAG
    Recently there was a SO question asking how to implement a feature which blocked users from copying text from a page in their browser. There were many negative comments on this feature, both because it's not practically possible to implement effectively and because it will interfere with the users' experience? What's a programmer to do in these sorts of situations in dealing with their clients or employers?

    Read the article

  • What event does IE dispatch when an activex control is being unloaded?

    - by tactoth
    Hi I have a ActiveX like this: class CMyActiveX : public CComObjectRootEx... ... { HRESULT FinalContruct(){return S_OK;} void Start() { // a new thread is created here for some task } void FinalRelease() { // if the thread is alive kill it } } However when browser is closed the method FinalRelease is not called. So the thread keeps alive and a crash is encountered at the exit. Any idea on this? Thank you!

    Read the article

  • image doesnt always render on web page

    - by zsharp
    One of my png files does not always get diplayed in the browser (both in firefox and IE). In firebug the image is visible. sometimes ill even see the image start loading and halfway it fizzles. what could this be.? the image is appx 10kb.

    Read the article

  • jQuery Treemap Plugin

    - by Revert
    Hello, I am trying to get the Treemap plugin (http://www.jquery.info/spip.php?article40) working with jQuery v1.3.x. The plugin works with jQuery v1.1 and v1.2 but for some reason it fails with the v1.3 base. This is the browser error "Error: uncaught exception: Syntax error, unrecognized expression: " Does anyone know changes occurred between JQuery v1.2 and v1.3 that could cause this? Cheers, D

    Read the article

  • Links from Google appending index.php to my URL

    - by davykiash
    I recently put up a site and I have been doing some SEO. However I noticed that links from Google search append index.php to my links. For example a site page which clearly appears as www.example.com/index/why on search together with correct content sample when clicked on ends up in the new browser as www.example.com/index.php/why Note that on my site all links are redirected to SSL and I use the MVC stucture. Any directives that am may be missing?

    Read the article

  • HTTP 403.9 - Access Forbidden: Too many users are connected

    - by sdsd
    hi I have created an application in VStudio. It ran nicely in debugging mode, but my computer became slower and slower as I worked until it finaly became frozen. after I manualy restarted it, the app wasn't running any more in debug and I get this execption in the browser. Only I am connected right now to the app. I have restarted the computer so there coudn't be any instance of a client connected I have removed and reinstalled the IIS what is wrong?

    Read the article

  • jQuery, .empty() and memory

    - by vandalo
    Hello, my application (ASP.NET MVC) shows a page which loads data constantly, at certain intervals. The jQuery script calls a controller and this one renders a different partial view, based on certain conditions. This partial view is the appended to the DOM with jQuery; previous elements are removed with the empty() method. I've realized that after one day the browser loads something like 600Mb of memory. What am I doing wrong? Thanks Alberto

    Read the article

  • URL breaking at special character

    - by Josh
    Hello All- I'm having trouble with a URL string in my Web Application. It's using a UNC path similar to \\houtestmachine\common\File1.pdf My problem is when it encounters files that have a # character. I tried doing a string newstring = originalstring.Replace("#", "%23"); but the # is still there in URL (target of a hyperlink) at runtime in the browser. How can I fix this?

    Read the article

  • How do I stop Opera from caching a page?

    - by nishkarr
    I am trying to get Opera to re-request a page every time instead of just serving it from the cache. I'm sending the 'Cache-control=no-cache' and 'Pragma: no-cache' response headers but it seems as if Opera is just ignoring these headers. It works fine in other browsers - Chrome, IE, Firefox. How do I stop Opera from caching pages? What I want to be able to do is have Opera re-request a page when the user clicks the Back button on the browser.

    Read the article

  • Handling a colon in an element ID in a CSS selector

    - by sblundy
    JSF is setting the ID of an input field to search_form:expression. I need to specify some styling on that element, but that colon looks like the beginning of a pseudo-element to the browser so it gets marked invalid and ignored. Is there anyway to escape the colon or something? input#search_form:expression { ///... }

    Read the article

facebook twitter digg google delicious technorati stumbleupon myspace wordpress linkedin gmail igoogle windows live tumblr viadeo yahoo buzz yahoo mail yahoo bookmarks favorites email print

< Previous Page | 305 306 307 308 309 310 311 312 313 314 315 316  | Next Page >