Search Results

Search found 29495 results on 1180 pages for 'cross site scripting'.

Page 734/1180 | < Previous Page | 730 731 732 733 734 735 736 737 738 739 740 741  | Next Page >

  • php cookies block access to directories

    - by user342391
    I have a mysql database of users that can login to my site and view content. I would like to block a couple of directories from certain users. What is the best way to do this. Currently when a user logs in a cookie is created with their customer id and the customer is is used to display their content. How would I block entire directories from my users???

    Read the article

  • ReSharper no longer runs unit tests

    - by Ed Woodcock
    Hey folks I'm trying to write some unit tests for an app I work on at work (In the vague hope that others might follow suit), and I was originally running these tests using NUnit and the ReSharper plugin. However, ReSharper will no longer run tests for me for some reason: It simply crosses them out with a red strikeout. There's no error code I'm afraid, and there's no mention of such behaviour on the JetBrains site. Has anyone else experienced similar benhaviour? Cheers, Ed

    Read the article

  • Help developing a very simple iPad application

    - by user220755
    I need to develop a very simple iPad application that takes RSS feed of images that will be updated constantly and will display them and you can slide through them. As simple as that. Is there a way to get basic help on doing this, I am very new to iPhone/iPad development and would like help. To make the question clearer, I would appreciate code samples (other than the ones displayed on Apple's developers site, tutorials, and guidelines. Thank you :)

    Read the article

  • How to validate SSL certificate chain in ruby with net/http

    - by maledictus
    How can I verify the certificates of a site like https://processing.ukash.com/ in ruby with net/http? https = Net::HTTP.new('processing.ukash.com', 443) https.use_ssl = true https.verify_mode = OpenSSL::SSL::VERIFY_NONE Works so far, but how do I verify that it's the right cert now? I saved the certificate from within firefox, but the resulting .pem file has many certificates in it and net/http doesn't seem to like it.

    Read the article

  • Web Form Security

    - by brandon14_99
    I set a cookie in the headers with an md5 hashed keyword. Then in my code, it checks for the exact matching cookie before displaying a form. Is this pretty much pointless? The form submits to an external site, so I am trying to secure the form without using captcha..

    Read the article

  • Refreshing page after posted vars

    - by Pete Herbert Penito
    So a form is submitted on my site, with form action equal to itself. I want the user to be able to refresh the page without sending the same variables again. I thought unset($_POST); would accomplish this for some reason it doesn't is there another way to accomplish this?

    Read the article

  • How to prevent hotlinking of flv files?

    - by Sarah
    How to, using PHP and/or .htaccess prevent hotlinking? There's a site, which is allowed to access the flv files located on my server, however I've noticed that there are many requests from other domains as well... Here's the actual rule: RewriteCond %{HTTP_REFERER} !^http://alloweddomain.com/.*$ [NC] RewriteRule .flv denied.php [NC,L] It's working OK except for Firefox, because FF is not sending referrer info when accessing .flv files...

    Read the article

  • HTML5 applicationCache in local development

    - by jesper
    I'm experimenting with application cache based on this example: http://html5demos.com/html5demo.manifest This example works fine in ff, but when I create analogous site (almost identical) I get only status "UNCACHED (numeric value 0) -- The ApplicationCache object's cache host is not associated with an application cache at this time." I work on xampp and I've set correct mime-type. When the page is loading ff "is asking to store data on your computer for offline use" and when I show Tools - Options - Advanced - Network - Offline data there is localhost but with 0B size.

    Read the article

  • Track only iframe history

    - by evanwong
    I have a page which contains an iframe and I want to track the history of the iframe only. I tried to use the history object like this: <!DOCTYPE html> <html> <head> <title></title> <script type="text/javascript"> function checkFrameHistory() { alert(window.frames["test2"].history.length); } function checkThisHistory() { alert(history.length); } </script> </head> <body> <iframe name="test2" src="test2.html"></iframe> <div> <input type="button" onclick="checkFrameHistory()" value="Frame history"/> <input type="button" onclick="checkThisHistory()" value="This history"/> </div> </body> </html> test2.html <!DOCTYPE html> <html> <head> <title></title> <script type="text/javascript"> function checkMyHistory() { alert(history.length); } </script> </head> <body> <div> Test2 </div> <div> <input type="button" onclick="checkMyHistory()" value="My history"/> </div> </body> </html> but it actually gave me the history including the parent window. For instance, I went to another site in the main window and came back to my iframe test site. Both window.frames["test2"].history.length and history.length still gave me the same count by increasing the length by 2. Did I do it wrong? Is there a way to track only the iframe history?

    Read the article

  • How to resolve this PostgreSQL error on OS 10.6 (Snow Leopard)

    - by wgpubs
    I followed the instructions for setting up postgresql from this site All seems to go fine until I try: createuser --superuser myname -U postgres I get the following exception: createuser: could not connect to database postgres: could not connect to server: No such file or directory Is the server running locally and accepting connections on Unix domain socket "/tmp/.s.PGSQL.5432"? For the life of me I can't figure out how to resolve this. Any ideas???

    Read the article

  • Track Users of Website With JQuery Plugin

    - by grungefreak1
    Hi, Is there a way to track users of my site (based on Session ID's) using JQuery? I would like to know what pages and how long they spent on each page for example. Or any other suggestions are welcome. I had tried this with Google Analytics but I cannot seem to track individual users based on an ID. GF

    Read the article

  • jquery and mobile browser compatiblity?

    - by fractalbit
    I want to build a relatively simple version of my site for mobile phones but i will definately need javascript and jquery for many functions. Googling didn't help to find an answer. How is compatibility of jquery with popular browsers in mobile phones? I am talking for smartphones. For example the deafult browsers for these platforms Windows mobile 6+ Android 1.5+ iphone 3g and let's add opera mobile. Has anyone tried it?

    Read the article

  • CakePHP requestAction and eval code

    - by Naveed
    Hi, I am using cakephp for my site. I have stored multiple blocks in database and trying to access the code with following syntax. foreach($blocks as $block){ if($block['Block']['position'] == 'left'){ $str = $block['Block']['value']; eval("\"echo $str\";"); } } And i m getting this error; : Undefined property: View::$requestAction [APP\views\layouts\home.ctp(60) : eval()'d code Your Help will be highly appreciated. Thanks,

    Read the article

  • Apache mod_rewrite rules problems

    - by ni
    domain.com/index/ to domain.com/index.php domain.com/index/hello to domain.com/index.php/hello The site is use path_info,and the default rule not works: RewriteRule ^([^/]+)/(.*)$ $1.php/$2 [L] I change to: RewriteRule ^([^/.]+)((/[^/]+)*)/?$ $1.php$2 [L] That was strange domain.com/index/ to domain.com/index.php works fine domain.com/index/hello to domain.com/index.php/hello not work and it says No input file specified. Php is run in fast cgi mode in apache

    Read the article

  • Issues in Ajax based applications

    - by Sinuhe
    I'm very interested in developing Ajax based applications. This is, loading almost all of the content of the application via XMLHttpRequest, instead of only some combos and widgets. But if I try to do this form scratch, soon I find some problems without an easy solution. I wonder if there is some framework (both client and server side) to deal with this issues. As far as I know, there isn't (but I've searched mainly in Java world). So I am seriously thinking of doing my own framework, at least for my projects. Therefore, in this question I ask for several things. First, the possible problems of an ajax based development. Then, I'm looking for some framework or utility in order to deal with them. Finally, if there is no framework available, what features must it have. Here are the issues I thought: 1 - JavaScript must be enabled. Security paranoia isn't the only problem: a lot of mobile devices couldn't use the application, too. 2 - Sometimes you need to update more than one DIV (e.g. main content, menu and breadcrumbs). 3 - Unknown response type: when you make an Ajax call, you set the callback function too, usually specifying if expected response is a javascript object or in which DIV put the result. But this fails when you get another type of response: for example when the session has expired and the user must log in again. 4 - Browser's refresh, back and forward buttons can be a real pain. User will expect different behaviors depending on the situation. 5 - When search engines indexes a site, only follow links. Thus, content load by Ajax won't "exist" for who doesn't know about it yet. 6 - Users can ask for open a link in a different window/tab. 7 - Address bar doesn't show the "real" page you are in. So, you can't copy the location and send it to a friend or bookmark the page. 8 - If you want to monetize the site, you can put some advertisings. As you don't refresh entire page and you want to change the ad after some time, you have to refresh only the DIV where the ad is. But this can violate the Terms and Conditions of your ad service. In fact, it can go against AdSense TOS. 9 - When you refresh an entire page, all JavaScript gets "cleaned". But in Ajax calls, all JavaScript objects will remain. 10 - You can't easily change your CSS properties.

    Read the article

< Previous Page | 730 731 732 733 734 735 736 737 738 739 740 741  | Next Page >