[B! programming][security] ghostbassã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

ghostbass id:ghostbass

programmingã¨securityã«é–¢ã™ã‚‹ghostbassã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (56)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

ãƒ–ãƒ©ã‚¦ã‚¶ã®å±¥æ´ã‚’æ“ä½œã—ã¦ã€Œæˆ»ã‚‹ã€ãƒœã‚¿ãƒ³ã§åºƒå‘Šã‚’å‡ºã™ã‚„ã¤ã«ã¤ã„ã¦ â€“ ã‚³ãƒ¼ãƒ’ãƒ¼ã‚µãƒ¼ãƒã¯é¦™ç‚‰ã§ã‚ã‚‹
2023å¹´å¾ŒåŠé ƒã‹ã‚‰ã€ãƒ–ãƒ©ã‚¦ã‚¶ã®ã€Œæˆ»ã‚‹ã€ãƒœã‚¿ãƒ³ã‚’æŠ¼ã™ã¨ã€è¨ªå•ã—ãŸãŠã¼ãˆã®ãªã„ãƒšãƒ¼ã‚¸ãŒè¡¨ç¤ºã•ã‚Œã‚‹ã“ã¨ãŒå¢—ãˆãŸã€‚ãã†ã„ã†ãƒšãƒ¼ã‚¸ã¯å¤§æŠµã€è¨˜äº‹é¢¨ã®åºƒå‘Šã‚„ã‚µã‚¤ãƒˆå†…ã®è¨˜äº‹ã¸ã®ãƒªãƒ³ã‚¯ãŒå¤§é‡ã«ä¸¦ã¶ã¨ã„ã†æ§‹æˆã«ãªã£ã¦ã„ã‚‹ã€‚ ã“ã‚“ãªãƒ¬ã‚¤ã‚¢ã‚¦ãƒˆã«ãªã£ã¦ã‚‹ã“ã¨ãŒå¤šã„ã€‚ ã“ã®æ‰‹æ³•ã¯ãƒ–ãƒ©ã‚¦ã‚¶ãƒãƒƒã‚¯åºƒå‘Šã¨ã‹ãƒ–ãƒ©ã‚¦ã‚¶ãƒãƒƒã‚¯ãƒ¬ã‚³ãƒ¡ãƒ³ãƒ‰ (ã‚ã‚‹ã„ã¯ãƒ¬ã‚³ãƒ¡ãƒ³ãƒ‡ãƒ¼ã‚·ãƒ§ãƒ³) ã¨ã‹å‘¼ã°ã‚Œã¦ãŠã‚Šã€å›½å†…å¤–ã®è¤‡æ•°ã®Webåºƒå‘Šä¼šç¤¾ãŒã“ã‚Œã‚’æä¾›ã—ã¦ã„ã‚‹ã‚ˆã†ã ã€‚ ãŸã¨ãˆã°ã€ã“ã¡ã‚‰ã¯GMOã‚¢ãƒ‰ãƒžãƒ¼ã‚±ãƒ†ã‚£ãƒ³ã‚°ã® â€œTAXELâ€ ãŒæä¾›ã—ã¦ã„ã‚‹ãƒ–ãƒ©ã‚¦ã‚¶ãƒãƒƒã‚¯ãƒ¬ã‚³ãƒ¡ãƒ³ãƒ‰ã€‚ ã€æ–°ãŸãªåŽç›Šãƒ»å›žéŠæºãŒèª•ç”Ÿï¼ã€‘ãƒ–ãƒ©ã‚¦ã‚¶ãƒãƒƒã‚¯ãƒ¬ã‚³ãƒ¡ãƒ³ãƒ‰ ã‚µã‚¤ãƒˆã‹ã‚‰é›¢ã‚Œã¦ã—ã¾ã†ãƒ¦ãƒ¼ã‚¶ãƒ¼ã«å¯¾ã—ã€åºƒå‘Šã‚„ãƒ¬ã‚³ãƒ¡ãƒ³ãƒ‰è¨˜äº‹ã‚’è¡¨ç¤ºã•ã›ã‚‹ã“ã¨ã§ã€åŽç›ŠåŒ–ã‚„å†…éƒ¨å›žéŠã«ç¹‹ã’ã‚‹ã“ã¨ã‚’ç›®çš„ã¨ã—ã¦ã„ã‚‹ãƒ•ã‚©ãƒ¼ãƒžãƒƒãƒˆã«ãªã‚Šã¾ã™ã€‚ â€¦â€¦ã¨ã„ã†ã®ãŒã‚»ãƒ¼ãƒ«ã‚¹ãƒã‚¤ãƒ³ãƒˆã‚‰ã—ã„ã®ã ãŒã€ã‚µã‚¤ãƒˆã‹ã‚‰é›¢ã‚Œã‚‹äººã¯ã€ã‚µã‚¤ãƒˆã‹ã‚‰é›¢ã‚Œ
ghostbass 2024/08/15
ãªã‚“ã§åºƒå‘Šã”ã¨ããŒã‚ªãƒªã‚¸ãƒ³ã«æ‰‹ã‚’å‡ºã›ã‚‹ã‚“ã ã‚ˆ

ãƒ–ãƒ©ã‚¦ã‚¶

åºƒå‘Š

programming

security
ãƒªãƒ³ã‚¯
jyoshige.com
jyoshige.com 2023 è‘—ä½œæ¨©. ä¸è¨±è¤‡è£½ ãƒ—ãƒ©ã‚¤ãƒã‚·ãƒ¼ãƒãƒªã‚·ãƒ¼
ghostbass 2019/08/10
å•é¡Œã¯ãã“ã˜ã‚ƒããƒ¼æ„Ÿ

programming

security
ãƒªãƒ³ã‚¯
ã‚µã‚¤ãƒãƒ¼ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£.com
ã‚µã‚¤ãƒãƒ¼ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ¼ã‚µãƒ¼ãƒ“ã‚¹ã®æ¯”è¼ƒãƒ»è³‡æ–™è«‹æ±‚ã‚µã‚¤ãƒˆï½œä¸å°ä¼æ¥å‘ã‘ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å¯¾ç–ã‚’è€ƒãˆã‚‹ã€Œã‚µã‚¤ãƒãƒ¼ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã€ã«é–¢ã™ã‚‹æƒ…å ±ãƒ¡ãƒ‡ã‚£ã‚¢ã€‚æ—¥æœ¬ã®ä¸å°ä¼æ¥ã®æƒ…å ±ã‚’å®ˆã‚‹ãŸã‚ã€æœ€æ–°ã®ã‚»ãƒŸãƒŠãƒ¼ãƒ»äººæè‚²æˆãƒ»è£½å“ãƒ»ä¸å°ä¼æ¥å‘ã‘ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å¯¾ç–ã‚’è€ƒãˆã‚‹ã‚µã‚¤ãƒãƒ¼ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£æƒ…å ±ã‚µã‚¤ãƒˆã§ã™ã€‚
ghostbass 2018/12/28
ã€Œå…ˆã«ã€ç›¸æ‰‹å…ˆç®¡ç†è€…ã«ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã‹ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ç”Ÿæˆãƒ«ãƒ¼ãƒ«ã ã‘ã‚’ä¼ãˆã¦ãŠãã€ãªã‚‰ã‚¢ãƒªã‹ãª

security

programming
ãƒªãƒ³ã‚¯
JavaScriptæ–‡å—åˆ—ã®ã‚¨ã‚¹ã‚±ãƒ¼ãƒ—
ã“ã‚Œã‚‰ã®ä¸ã§æ³¨ç›®ã™ã¹ãã¯ â€˜ ã¨ â€ ã¨ \ ã§ã™ã€‚ã‚·ãƒ³ã‚°ãƒ«ã‚¯ã‚©ãƒ¼ãƒˆã€ãƒ€ãƒ–ãƒ«ã‚¯ã‚ªãƒ¼ãƒˆã¯æ–‡å—ãƒªãƒ†ãƒ©ãƒ«ã‚’ä½œæˆã™ã‚‹ç‚ºã«åˆ©ç”¨ã•ã‚Œã€\ ã§ã‚¨ã‚¹ã‚±ãƒ¼ãƒ—ã§ãã‚‹ã“ã¨ã§ã™ã€‚ã¤ã¾ã‚Šã€æ–‡å—ãƒªãƒ†ãƒ©ãƒ«ã®æœ€å¾Œã« \ ãŒç¾ã‚Œã‚‹ã¨æ–‡å—åˆ—ã®çµ‚ç«¯ãŒç„¡ããªã‚Šã¾ã™ã€‚å˜ç‹¬ã§ä¸æ£ãªJavaScriptã®æŒ¿å…¥ãŒå¯èƒ½ã«ãªã‚‹è¨³ã§ã¯ã‚ã‚Šã¾ã›ã‚“ãŒã€ãƒ—ãƒã‚°ãƒ©ãƒ ã®æ§‹é€ ãŒç ´å£Šã•ã‚Œã‚‹äº‹ã‚’æ„å‘³ã—ã¾ã™ã€‚ PHPã«ã¯JavaScriptæ–‡å—åˆ—ç”¨ã®ã‚¨ã‚¹ã‚±ãƒ¼ãƒ—é–¢æ•°ãŒç”¨æ„ã•ã‚Œã¦ã„ã¾ã›ã‚“ã€‚htmlspecialchars()ã‚„htmlentities()ã§ä»£ç”¨ã—ã¦ã„ã‚‹å ´åˆã‚‚å¤šã„ã¨æ€ã„ã¾ã™ã€‚ã—ã‹ã—ã€ã“ã‚Œã‚‰ã®é–¢æ•°ã§ã¯JavaScriptæ–‡å—åˆ—ã®ã‚¨ã‚¹ã‚±ãƒ¼ãƒ—ã‚’ååˆ†ã«è¡Œã†äº‹ãŒã§ãã¾ã›ã‚“ã€‚ JavaScriptãƒ—ãƒã‚°ãƒ©ãƒ ã®æ§‹é€ ãŒç ´å£Šã•ã‚Œã‚‹ä¾‹ <?php $msg1 = 'test string\\'; $msg2 = ');alert(document.cookie); //
ghostbass 2016/04/13
ã¾ã¨ã‚‚ã«ã‚„ã‚‹ãªã‚‰ã“ã“ã¾ã§å¿…è¦ã€ã¨ã„ã†äº‹ã€‚/ hiddenã¨ã‹data-*ã¨ã‹ã«è¨å®šã™ã‚‹æ–¹ãŒæ¥½(ã‚¨ã‚¹ã‚±ãƒ¼ãƒ—é–¢æ•°ãŒãƒã‚°ã£ã¦ãªã„å ´åˆ)

programming

javascript

security
ãƒªãƒ³ã‚¯
Code4Sec | LinkedIn
Aceite e cadastre-se no LinkedIn Ao clicar em Continuar para se cadastrar ou entrar, vocÃª aceita o Contrato do UsuÃ¡rio, a PolÃtica de Privacidade e a PolÃtica de Cookies do LinkedIn.
ghostbass 2015/12/17
è‰¯ãã¾ã¨ã¾ã£ã¦ã„ã‚‹

php

security

programming
ãƒªãƒ³ã‚¯
ã€SQLã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³å¯¾ç–ã€‘å¾³ä¸¸å…ˆç”Ÿã«æ€’ã‚‰ã‚Œãªã„ã€å‹•çš„SQLã®å®‰å…¨ãªçµ„ã¿ç«‹ã¦æ–¹
SQLã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³ã‚’ãƒ»ãƒ»ãƒ»é§†é€ã—ã¦ã‚„ã‚‹ï¼ï¼ ã“ã®ä¸–ã‹ã‚‰ãƒ»ãƒ»ãƒ»ä¸€åŒ¹æ®‹ã‚‰ãšï¼ï¼ (PHPã‚«ãƒ³ãƒ•ã‚¡ãƒ¬ãƒ³ã‚¹2015) Read less
ghostbass 2015/10/08
è‰¯ã„è³‡æ–™/LINQã¯è‰¯ãã§ãã¦ã„ã‚‹ã‘ã©çœŸä¼¼ã—ã¦å®Ÿè£…ã—ã¦ã‚‚PHPã ã¨å¼ã‚’æ¸¡ã›ãªã„ã®ã ã‚ˆãªã‚ã€‚callableã®ä¸èº«ã¨ã‹æ§‹æ–‡ãƒ„ãƒªãƒ¼ãŒå–ã‚Šå‡ºã›ã‚Œã°ã„ã„ã®ã«

programming

php

security
ãƒªãƒ³ã‚¯
ã€Œã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å¯¾ç–ã€
ã€Œä¸æ£ãªå…¥åŠ›ã«å¯¾ã—ã¦è„†å¼±æ€§ã‚’ç™ºç”Ÿã•ã›ãªã„ã‚ˆã†ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å¯¾ç–ã¨ã—ã¦ãƒãƒªãƒ‡ãƒ¼ã‚·ãƒ§ãƒ³ã‚’è¡Œã†ã€ã€‚ã‚¢ãƒ›ã‹ã€‚ãƒ—ãƒã‚°ãƒ©ãƒžãªã‚‰ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å¯¾ç–ã¨ã‹æ°—ã«ã™ã‚‹ãªã€‚ã„ã‚„ã€æ°—ã«ã™ã‚‹ãªã¨ã„ã†ã®ã¯è¨€ã„éŽãŽã ã‘ã‚Œã©ã€ã»ã¨ã‚“ã©ã®å ´åˆã«ãŠã„ã¦ã‚ãªãŸã®æ›¸ãã‚³ãƒ¼ãƒ‰ã¯ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å¯¾ç–ã®å¿…è¦æ€§ã¯ãªã„ã€‚ æ”»æ’ƒè€…ã®ç´°å·¥ã—ãŸå…¥åŠ›ã«ã‚ˆã£ã¦SQL/HTML/JavaScriptãŒå£Šã‚Œã‚‹ã¨ã‹ãƒãƒƒãƒ•ã‚¡ã‚ªãƒ¼ãƒãƒ¼ãƒ•ãƒãƒ¼ãŒç™ºç”Ÿã™ã‚‹ã¨ã‹ã€ãã†ã„ã£ãŸè„†å¼±æ€§ã¨å‘¼ã°ã‚Œã‚‹ã»ã¨ã‚“ã©ã®ã‚‚ã®ã¯ãŸã ã®ãƒã‚°ã ã€‚ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å¯¾ç–ã£ã¦ã„ã†ã®ã¯ã‚³ãƒ¼ãƒ‰ã¨ã¯åˆ‡ã‚Šé›¢ã•ã‚ŒãŸé ˜åŸŸã§è¡Œã†DEPã ã£ãŸã‚ŠASLRã ã£ãŸã‚ŠX-Frame-Optionsã ã£ãŸã‚ŠCSPã ã£ãŸã‚Šiframe sandboxã ã£ãŸã‚Šã€ãã†ã„ã†ã‚‚ã®ãŒã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å¯¾ç–ã ã€‚ã‚³ãƒ¼ãƒ‰ä¸Šã§æ›¸ãã®ã¯ã€Œã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã¨ã—ã¦æ£ã—ãå‹•ä½œã™ã‚‹ãŸã‚ã®å‡¦ç†ã€ã ã‘ã ã€‚ ã‚‚ã¡ã‚ã‚“ä¾‹å¤–ã‚‚ã‚ã‚‹ã‹ã‚‚ã—ã‚Œãªã„ã‘ã©ã€ãã‚Œã¯ã‚ãã¾ã§ã‚‚ä¾‹å¤–ã ã€‚æ—¥å¸¸çš„ã«æ›¸ã
ghostbass 2015/02/05
ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ä»•æ§˜ã¨ã—ã¦ã€Œã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å¯¾ç–ã®ãŸã‚næ–‡å—ã¾ã§è¨±å¯ã€ã¨ã‹ã¯ã‚ã£ã¦è‰¯ãã¦ã€ãã®ä¸Šã§ãƒãƒªãƒ‡ãƒ¼ã‚·ãƒ§ãƒ³ãŒå˜åœ¨ã™ã‚‹ã®ã‚‚è‰¯ãã¦ã€ã§çµ‚ã‚ã‚Šã€‚åˆ¥ã«ãƒãƒªãƒ‡ãƒ¼ã‚·ãƒ§ãƒ³ã‚„ã‚Šã¾ã›ã‚“ã€ã¨ã‹ã‚ã‚“ã¾ã‚Šèžã‹ãªã„ã€‚

programming

security
ãƒªãƒ³ã‚¯
ã‚ˆãã‚ã‹ã‚‹PHPã®æ•™ç§‘æ›¸ PHP5.5å¯¾å¿œç‰ˆã®ã‚¯ãƒã‚¹ã‚µã‚¤ãƒˆãƒ»ã‚¹ã‚¯ãƒªãƒ—ãƒ†ã‚£ãƒ³ã‚°
ãŸã«ãã¡ã¾ã“ã¨ã•ã‚“ã® ã‚ˆãã‚ã‹ã‚‹PHPã®æ•™ç§‘æ›¸ãŒã“ã®ãŸã³æ”¹ç‰ˆã•ã‚Œã¦ã€ã‚ˆãã‚ã‹ã‚‹PHPã®æ•™ç§‘æ›¸ ã€PHP5.5å¯¾å¿œç‰ˆã€‘ã¨ã—ã¦å‡ºç‰ˆã•ã‚Œã¾ã—ãŸã€‚æ—§ç‰ˆã¯mysqlé–¢æ•°ã‚’ä½¿ã£ã¦SQLå‘¼ã³å‡ºã—ã—ã¦ã„ã¾ã—ãŸãŒã€mysqlé–¢æ•°ãŒPHP5.5ã«ã¦éžæŽ¨å¥¨ã¨ãªã£ãŸãŸã‚ã®ç·Šæ€¥å¯¾å‡¦çš„ãªå†…å®¹ã¨ãªã£ã¦ã„ã‚‹ã‚ˆã†ã§ã™ã€‚ã¤ã¾ã‚Šã€å¾“æ¥mysqlé–¢æ•°ã‚’å‘¼ã³å‡ºã—ã¦ã„ãŸç®‡æ‰€ã‚’mysqliã®å‘¼ã³å‡ºã—ã«å¤‰æ›´ã—ãŸã¨ã„ã†ã®ãŒã€ä¸»ãªå¤‰æ›´ç‚¹ã®ã‚ˆã†ã§ã€ã“ã‚Œä»¥å¤–ã¯ã‚ã¾ã‚Šå¤‰æ›´ç‚¹ã¯è¦‹ã‚ãŸã‚Šã¾ã›ã‚“ã€‚ æ—¢ã«ã€Amazonã§ã¯ã€ç†±çƒˆãªèªè€…ã®æ–¹ã‹ã‚‰ã®è©³ç´°ã®ãƒ¬ãƒ“ãƒ¥ãƒ¼ãŒå±Šã„ã¦ã„ã¾ã™ã€‚ ç¥žæœ¬å¾¡é™è‡¨ï¼ è¨€ã‚ãšã¨çŸ¥ã‚ŒãŸPHPãƒ—ãƒã‚°ãƒ©ãƒŸãƒ³ã‚°æ›¸ç±ã®ãƒãƒ³ã‚°ã‚»ãƒ©ãƒ¼ã€‚ 2010å¹´9æœˆã«ç™ºå£²ã•ã‚ŒãŸå‰ä½œã®æ”¹è¨‚ç‰ˆã€‚ PHPã®ãƒãƒ¼ã‚¸ãƒ§ãƒ³ã‚‚æœ€æ–°ã®5.5ã«å¯¾å¿œã€å†…å®¹ã¯å‰ä½œã¨æ®†ã©åŒã˜ã€‚ å°‘ã—å‰ã«å‰ä½œã‚’è³¼å…¥ã—ãŸæ–¹ã‚‚æœ¬æ›¸ã‚’è³¼å…¥ã—ãŸæ–¹ãŒã„ã„ã§ã—ã‚‡ã†ã€‚ ã€ä¸ç•¥ã€‘ ãã‚Œã«ã—ã¦ã‚‚ã€å¸¯ã®ã€Œï¼“ä¸‡äººã«èªã¾ã‚ŒãŸå®š
ghostbass 2014/03/10
â€œæ”»æ’ƒã«ã¯é«˜åº¦ãªãƒ¯ã‚¶ãŒå¿…è¦ã ãŒã€å¯¾ç–ã¯å¹³å‡¡â€ã‚ã‚“ã©ãã•ã„äº‹è€ƒãˆã‚‹äººãŒå¤šã„ã‚“ã§ã™ã‚ˆã€‚

security

php

programming
ãƒªãƒ³ã‚¯
IE9ä»¥é™ã§ã‚‚HTMLãƒ•ã‚©ãƒ¼ãƒ ã§ãƒ•ã‚¡ã‚¤ãƒ«åã¨ãƒ•ã‚¡ã‚¤ãƒ«ã®ä¸èº«ã‚’å¤–éƒ¨ã‹ã‚‰æŒ‡å®šã§ãã‚‹
æ˜¨æ—¥ã®æ—¥è¨˜ã€ŒIE8ä»¥å‰ã¯HTMLãƒ•ã‚©ãƒ¼ãƒ ã§ãƒ•ã‚¡ã‚¤ãƒ«åã¨ãƒ•ã‚¡ã‚¤ãƒ«ã®ä¸èº«ã‚’å¤–éƒ¨ã‹ã‚‰æŒ‡å®šã§ãã‚‹ã€ã«ã¦ã€ç¦æ£®å¤§å–œã•ã‚“ã‹ã‚‰æ•™ãˆã¦ã„ãŸã ã„ãŸå†…å®¹ã¨ã—ã¦ã€ãƒ•ã‚¡ã‚¤ãƒ«ã‚¢ãƒƒãƒ—ãƒãƒ¼ãƒ‰ã®HTMLãƒ•ã‚©ãƒ¼ãƒ ï¼ˆenctype="multipart/form-data"ï¼‰ã«ã¦ã€ã‚¢ãƒƒãƒ—ãƒãƒ¼ãƒ‰ã™ã‚‹ãƒ•ã‚¡ã‚¤ãƒ«åã¨ãƒ•ã‚¡ã‚¤ãƒ«ã®ä¸èº«ã‚’å¤–éƒ¨ã‹ã‚‰æŒ‡å®šã§ãã‚‹ã“ã¨ã‚’å ±å‘Šã—ã¾ã—ãŸã€‚ã“ã®éš›ã«IE8ä»¥å‰ã¨ã„ã†æ¡ä»¶ãŒã‚ã‚Šã¾ã—ãŸãŒã€ä»Šåº¦ã¯ã€ä¸‰äº•ç‰©ç”£ã‚»ã‚ãƒ¥ã‚¢ãƒ‡ã‚£ãƒ¬ã‚¯ã‚·ãƒ§ãƒ³ã®æœ›æœˆå²³ã•ã‚“ã‹ã‚‰ã€ã€Œãã‚ŒIE9ä»¥é™ã§ã‚‚ã§ãã‚‹ã‚ˆã€ã¨æ•™ãˆã¦ã„ãŸã ãã¾ã—ãŸã€‚æ—¢ã«ã”å˜ã˜ã ã£ãŸãã†ã§ã™ã€‚ç¦æ£®ã•ã‚“ã€æœ›æœˆã•ã‚“ã¨ã„ã†æ—¥æœ¬ã‚’ä»£è¡¨ã™ã‚‹ãƒã‚°ãƒãƒ³ã‚¿ãƒ¼ã‹ã‚‰ã€Œç§˜ä¼ã®ãŸã‚Œã€ã‚’ãŠã™ãã‚ã‘ã„ãŸã ã„ãŸã‚ˆã†ã§ã€èˆˆå¥®æ°—å‘³ã§ã™w ã¾ãšã€ãŠã•ã‚‰ã„ã¨ã—ã¦ã€IE8ä»¥å‰ã§ã®ãƒ‘ã‚¿ãƒ¼ãƒ³ã¯ä¸‹è¨˜ã®é€šã‚Šã§ã—ãŸï¼ˆè¦ç‚¹ã®ã¿ï¼‰ã€‚ <form enctype="multipart/form-data" action="pro_ad
ghostbass 2014/01/30
ãªã‚“ã§ã™ã¨/ã‚¨ã‚¹ã‚±ãƒ¼ãƒ—ã‚’ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã®æ–‡è„ˆã§ã€Œã—ã‹ã€èª¬æ˜Žã—ã¦ãªã„ã¨ã²ã£ã‹ã‹ã‚‹ã

programming

php

security
ãƒªãƒ³ã‚¯
PHPã¨ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã®è§£èª¬æ›¸12ç¨®é¡žã‚’èªã‚“ã§SQLã‚¨ã‚¹ã‚±ãƒ¼ãƒ—ã®è§£èª¬çŠ¶æ³ã‚’èª¿ã¹ã¦ã¿ãŸ
ã“ã®æŠ•ç¨¿ã¯PHP Advent Calendar 2013ã®13æ—¥ç›®ã®è¨˜äº‹ã§ã™ã€‚æ˜¨æ—¥ã¯@tanakahisateruã®PHPãŒç³žè¨€èªžãªã®ã¯ã©ã†è€ƒãˆã¦ã‚‚å‚ç…§ã‚’ãƒã‚¤ãƒ³ã‚¿ã ã¨æ€ã£ã¦ã„ã‚‹ãŠå‰ã‚‰ãŒæ‚ªã„ã§ã—ãŸã€‚ ç¾åœ¨twitterã®ã‚¿ã‚¤ãƒ ãƒ©ã‚¤ãƒ³ã§ã€å²ä¸Šç©ºå‰ã®SQLã®ã‚¨ã‚¹ã‚±ãƒ¼ãƒ—ãƒ–ãƒ¼ãƒ ãŒèµ·ã“ã£ã¦ã„ã¾ã™ã€‚ ã‚ªãƒ¬ã‚ªãƒ¬SQL ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£æ•™è‚²ã¯è«–ç†çš„ã«ç ´ç¶»ã—ã¦ã„ã‚‹Â | yohgaki's blog ã€Œãƒ—ãƒªãƒšã‚¢ãƒ¼ãƒ‰ã‚¯ã‚¨ãƒªãŒåŸºæœ¬ã ã‘ã©ã€å‹•çš„ã« SQL ã‚’çµ„ã¿ç«‹ã¦ã‚‹å ´åˆã‚‚ã‚ã‚‹ã‹ã‚‰ã€ãã†ã„ã†å ´åˆã«å‚™ãˆã¦ã‚¨ã‚¹ã‚±ãƒ¼ãƒ—ã‚‚çŸ¥ã£ã¦ãŠã„ãŸã»ã†ãŒã„ã„ã‹ã‚‚ã€ - Togetterã¾ã¨ã‚ ã‚¨ã‚¹ã‚±ãƒ¼ãƒ—ã¨ãƒ—ãƒ¬ãƒ¼ã‚¹ãƒ›ãƒ«ãƒ€ã‚’ã‚ãã‚‹è°è«– - Togetterã¾ã¨ã‚ SQLã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³å¯¾ç–ã¨ã—ã¦ã®ãƒ—ãƒªãƒšã‚¢ãƒ‰ã‚¹ãƒ†ãƒ¼ãƒˆãƒ¡ãƒ³ãƒˆã¨ã‚¨ã‚¹ã‚±ãƒ¼ãƒ—ã«ã¤ã„ã¦ã®è°è«– - Togetterã¾ã¨ã‚ IPAã®ã€Œå®‰å…¨ãªSQLã®å‘¼ã³å‡ºã—æ–¹ã€ãŒå®‰å…¨ã«ãªã£ã¦ã„ãŸ | yohgak
ghostbass 2013/12/13
ã ã‚Œã‚‚ã€Œã‚¨ã‚¹ã‚±ãƒ¼ãƒ—ã¯ä¸è¦ã€ã¨ã¯è¨€ã‚ãšã€Œãƒ—ãƒ¬ãƒ¼ã‚¹ãƒ›ãƒ«ãƒ€ä½¿ãˆã€ã¨è¨€ã£ã¦ã„ã‚‹ã®ã«ã„ã¤ã®é–“ã«ã‹ã€Œã‚¨ã‚¹ã‚±ãƒ¼ãƒ—ã¯ä¸è¦ã€ã«ãªã£ã¦ã‚‹ã£ã½ã„ã€‚

programming

security

php
ãƒªãƒ³ã‚¯
Rails4ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ ãƒªãƒãƒ¼ãƒ‡ãƒƒãƒ‰ï¼ˆä»®ï¼‰
(Last Updated On: 2018å¹´8æœˆ8æ—¥)å‰å›žå…¬é–‹ã—ãŸRails4ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã®ã‚¹ãƒ©ã‚¤ãƒ‰ã¯èª¤è§£ã‚’ã•ã‚Œã‚‹å¯èƒ½æ€§ãŒã‚ã‚‹ã®ã§ã¯ï¼Ÿã¨æŒ‡æ‘˜ã•ã‚Œã‚‹æ–¹ã‚‚å±…ãŸã®ã§ã€ŒRails4ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ ãƒªãƒãƒ¼ãƒ‡ãƒƒãƒ‰ã€ã¨ã—ã¦è¿½åŠ æƒ…å ±ã‚’åŠ ãˆãŸã‚¹ãƒ©ã‚¤ãƒ‰ã‚’ä½œã‚ã†ã‹ã¨æ€ã£ã¦ã„ã¾ã—ãŸã€‚ç¢ºã‹ã«ã€ä»Šè¦‹ç›´ã—ãŸã‚‰è‚å¿ƒãªæ‰€ã§è¿½åŠ ã—å¿˜ã‚Œã¦ã‚‹éƒ¨åˆ†ãŒã‚ã£ã¦èª¤è§£ã—ã‚„ã™ã„ã€ã¨ã„ã†ã‹è¨€ã„ãŸã„äº‹ãŒåˆ†ã‹ã‚‰ãªã„ã‹ã‚‚çŸ¥ã‚Œã¾ã›ã‚“ã€‚ å…¥åŠ›ãƒ‘ãƒ©ãƒ¡ãƒ¼ã‚¿ã‚’ãƒãƒªãƒ‡ãƒ¼ã‚·ãƒ§ãƒ³ã™ã‚‹ã¨ã¯ã€ãƒãƒªãƒ‡ãƒ¼ã‚·ãƒ§ãƒ³ã™ã‚‹ãƒ¡ã‚½ãƒƒãƒ‰ã‚’ä½œã£ã¦ãƒãƒªãƒ‡ãƒ¼ã‚·ãƒ§ãƒ³ã™ã‚‹ã€ã“ã¨ã§ã™ã€‚å¿…é ˆãƒ»è¨±å¯è¨å®šã ã‘ã ã¨ãƒ¢ãƒ‡ãƒ«ã«æ¸¡ã™ãƒ‡ãƒ¼ã‚¿ãŒã©ã‚Œã‹ã—ã‹åˆ†ã‹ã‚Šã¾ã›ã‚“ã€‚è¨±å¯è¨å®šã¨åŒæ™‚ã«ãƒãƒªãƒ‡ãƒ¼ã‚·ãƒ§ãƒ³ã™ã‚‹äº‹ãŒè‰¯ã„ã€ã¨ã„ã†äº‹ã§ã™ã€‚å°‘ãªãã¨ã‚‚ã“ã“ã ã‘ã¯ç›´ã—ãŸæ–¹ãŒè‰¯ã•ãã†ã§ã™ã€‚ ã‚ã¾ã‚Šæ™‚é–“ãŒå–ã‚Œãªã‹ã£ãŸã®ã§ã‚¹ãƒ©ã‚¤ãƒ‰ã‚’ä½œã‚‹ãŸã‚ã«ä½œã£ãŸãƒ¡ãƒ¢ã‚’å–ã‚Šæ•¢ãˆãšå…¬é–‹ã—ã¾ã™ã€‚ã‚¹ãƒ©ã‚¤ãƒ‰ã«ã—ã¦æ¬²ã—ã„ã¨ã„ã†æ–¹ãŒå¤šã‘ã‚Œã°ã‚¹ãƒ©ã‚¤ãƒ‰ã«ã™ã‚‹ã‹ã‚‚çŸ¥ã‚Œã¾ã›ã‚“
ghostbass 2013/07/16
request -- validate -- app -- model <--> validate ??

security

programming
ãƒªãƒ³ã‚¯
ITãƒˆãƒ¬ãƒ¡ - Sun Certified Programmer for the JAVA 2 Platform
å¹³ç´ ã‚ˆã‚Šã€Œï¼ ITãƒ©ãƒ¼ãƒ‹ãƒ³ã‚°ã‚«ãƒ¬ãƒ³ãƒ€ãƒ¼ã€ã€ŒITãƒˆãƒ¬ãƒ¡ã€ã‚’ã”åˆ©ç”¨ã„ãŸã ãã€èª ã«ã‚ã‚ŠãŒã¨ã†ã”ã–ã„ã¾ã™ã€‚ ï¼ ITç·¨é›†éƒ¨ã§ã¯ã€ã€Œå„ç¨®ITã‚¹ã‚ãƒ«ç ”ä¿®ã€ã‚»ãƒŸãƒŠãƒ¼ã€ãƒ“ã‚¸ãƒã‚¹ã‚¹ã‚ãƒ«ç ”ä¿®ã®æ¤œç´¢ã‚µã‚¤ãƒˆã€ã¨ã—ã¦ï¼ ITãƒ©ãƒ¼ãƒ‹ãƒ³ã‚°ã‚«ãƒ¬ãƒ³ãƒ€ãƒ¼ã‚’ã€ã€ŒIT ã‚¨ãƒ³ã‚¸ãƒ‹ã‚¢ã®ã‚¹ã‚ãƒ«ã‚¢ãƒƒãƒ—ã«å½¹ç«‹ã¤å•é¡Œã‚’æ¯Žæ—¥ï¼ˆâ€»åœŸæ—¥ç¥æ—¥ã‚’é™¤ãï¼‰1å•ãšã¤å‡ºé¡Œã™ã‚‹ç„¡æ–™ã‚µãƒ¼ãƒ“ã‚¹ã€ã¨ã—ã¦ITãƒˆãƒ¬ãƒ¡ã‚’é‹å–¶ã—ã¦ãã¾ã—ãŸã€‚ã“ã‚Œã¾ã§ã‚µãƒ¼ãƒ“ã‚¹ã‚’ç¶šã‘ã‚‹ã“ã¨ãŒã§ããŸã®ã¯ã€ä¸¡ã‚µãƒ¼ãƒ“ã‚¹ã®ã‚³ãƒ³ã‚»ãƒ—ãƒˆã«å…±æ„Ÿã‚’ã„ãŸã ãã€é©åˆ‡ã«ã”åˆ©ç”¨ã‚’ã„ãŸã ã„ãŸçš†ã•ã¾ã®ã”æ”¯æ´ãŒã‚ã£ãŸã‹ã‚‰ã“ãã¨è€ƒãˆã¦ãŠã‚Šã¾ã™ã€‚é‡ãã¦å¾¡ç¤¼ç”³ã—ä¸Šã’ã¾ã™ã€‚ ã—ã‹ã—ãªãŒã‚‰ã€å…¨ä½“çš„ãªåˆ©ç”¨ã®æ¸›å°‘ã‚’é‘‘ã¿ãŸçµæžœã€2020å¹´9æœˆ15æ—¥ï¼ˆç«ï¼‰15:00ã‚’ã‚‚ã¡ã¾ã—ã¦ï¼ ITãƒ©ãƒ¼ãƒ‹ãƒ³ã‚°ã‚«ãƒ¬ãƒ³ãƒ€ãƒ¼ã€ITãƒˆãƒ¬ãƒ¡ã®ã‚µãƒ¼ãƒ“ã‚¹ã‚’çµ‚äº†ã™ã‚‹ã“ã¨ã«ã—ã¾ã—ãŸã€‚ ã“ã‚Œã¾ã§ã”åˆ©ç”¨ã„ãŸã ãã¾ã—ãŸçš†ã•ã¾ã«ã¯æ®‹å¿µãªãŠçŸ¥ã‚‰ã›ã¨ãªã‚Šã€èª ã«å¿ƒè‹¦ã—ãæ€ã£ã¦ãŠã‚Šã¾ã™ã€‚ä½•ã¨ãžã€ã”ç†
ghostbass 2012/06/29
ã†ãƒ¼ã‚“

programming

security
ãƒªãƒ³ã‚¯
PHP Application Security Checklist
PHP Application Security Checklist BASIC â–¡â–¡ Strongâ–¡passwordsâ–¡areâ–¡used. â–¡â–¡ Passwordsâ–¡storedâ–¡safely. â–¡â–¡ register_globalsâ–¡isâ–¡disabled. â–¡â–¡ Magicâ–¡quotesâ–¡isâ–¡disabled. â–¡â–¡ display_errorsâ–¡isâ–¡disabled. â–¡â–¡ Server(s)â–¡areâ–¡physicallyâ–¡secure. INPUT â–¡â–¡ Inputâ–¡fromâ–¡$_GET,â–¡$_POST,â–¡ $_COOKIE,â–¡andâ–¡$_REQUESTâ–¡ isâ–¡consideredâ–¡tainted. â–¡â–¡ Understoodâ–¡thatâ–¡onlyâ–¡someâ–¡ valuesâ–¡inâ–¡$_SERVERâ–¡andâ–¡ $_ENVâ–¡areâ–¡untainted. â–¡â–¡ $_SERVER[
ghostbass 2012/01/05
ãƒ–ã‚¯ãƒžã—ã¦ãªã‹ã£ãŸï¼Ÿ

programming

security
ãƒªãƒ³ã‚¯
ä½“ç³»çš„ã«å¦ã¶ å®‰å…¨ãªWebã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã®ä½œã‚Šæ–¹ - é›»åæ›¸ç±ãƒ•ã‚¡ãƒ³ã®ãŸã‚ã®å‡ºç‰ˆç¤¾ç›´å–¶é›»åæ›¸ç±ãƒ¢ãƒ¼ãƒ«ã€Œãƒ–ãƒƒã‚¯ãƒ‘ãƒ–ã€
å…ˆå–ã‚Šæ¼«ç”»ãƒŠãƒ“ã‚²ãƒ¼ã‚·ãƒ§ãƒ³
ghostbass 2012/01/05
ä¾¿åˆ©ã ãŒã©ã†ã—ã‚ˆã†

programming

security
ãƒªãƒ³ã‚¯
ä½•ãŒæ£ã—ã„ã®ã‹ã‚’è€ƒãˆã‚‹éš›ã¯ã€æ£ã—ã•ã®åŸºæº–ãŒå¿…è¦ - ockeghem's blog
å¤§åž£ã•ã‚“ã®å¯„ç¨¿è¨˜äº‹ã€Œç¬¬44å›ž ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å¯¾ç–ãŒç¢ºå®Ÿã«å®Ÿæ–½ã•ã‚Œãªã„2ã¤ã®ç†ç”±ï¼šãªãœPHPã‚¢ãƒ—ãƒªã«ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ›ãƒ¼ãƒ«ãŒå¤šã„ã®ã‹?ï½œgihyo.jp â€¦ æŠ€è¡“è©•è«–ç¤¾ã€ã®ã¾ã¨ã‚ã«ã¦ã€ã€Žæœ€å¾Œã«ã€Œä½•ãŒæ£ã—ã„ã®ã‹ï¼Ÿã€å¸¸ã«è€ƒãˆã‚‹ã‚ˆã†ã«ã—ã¦ãã ã•ã„ã€ã¨æ›¸ã‹ã‚Œã¦ã„ã¾ã™ã€‚ã“ã®éƒ¨åˆ†ã¯ã€ç§ã¸ã®åè«–ã®ã‚ˆã†ã§ã™ã®ã§ã€ã“ã®ã‚¨ãƒ³ãƒˆãƒªã§è¿”ç”ã—ãŸã„ã¨æ€ã„ã¾ã™ã€‚ å¤§åž£ã•ã‚“ã®ä¸»å¼µ å…ˆã«ã‚‚è¿°ã¹ãŸã‚ˆã†ã«ã€å¤§åž£ã•ã‚“ã¯ã“ã®ã‚¨ãƒ³ãƒˆãƒªã®ã€Œã¾ã¨ã‚ã€ã¨ã—ã¦ä»¥ä¸‹ã®ã‚ˆã†ã«æ›¸ã‹ã‚Œã¦ã„ã¾ã™ã€‚ æœ€å¾Œã«ã€Œä½•ãŒæ£ã—ã„ã®ã‹ï¼Ÿã€å¸¸ã«è€ƒãˆã‚‹ã‚ˆã†ã«ã—ã¦ãã ã•ã„ã€‚ http://gihyo.jp/dev/serial/01/php-security/0044?page=2 ã“ã®ä¸»å¼µè‡ªä½“ã«ã¯ç§ã‚‚å¤§è³›æˆã§ã™ã€‚å¤§åž£ã•ã‚“ã®è¨˜äº‹ã¯ä»¥ä¸‹ã®ã‚ˆã†ã«ç¶šãã¾ã™ã€‚ ä¾‹ãˆã°ï¼ŒSQLæ–‡ã‚’ä½œæˆã™ã‚‹å ´åˆã«ãƒªãƒ†ãƒ©ãƒ«ï¼ˆãƒ‘ãƒ©ãƒ¡ãƒ¼ã‚¿ï¼‰ã‚’æ–‡å—åˆ—ã¨ã—ã¦ã‚¨ã‚¹ã‚±ãƒ¼ãƒ—ã™ã‚‹ã¨æµ®å‹•å°æ•°ç‚¹åž‹ã®ãƒ‡ãƒ¼ã‚¿ãŒæ£ã—ãå‡¦ç†ã•ã‚Œãªã„ãƒ‡
ghostbass 2011/12/22
security

programming

database
ãƒªãƒ³ã‚¯
å®‰å…¨ãªWebã‚¢ãƒ—ãƒªã‚’ä½œã‚ŠãŸã‘ã‚Œã°æ–°ã—ã„ãƒ•ãƒ¬ãƒ¼ãƒ ãƒ¯ãƒ¼ã‚¯ãŒã‚ªã‚¹ã‚¹ãƒ¡ | æ°´ç„¡æœˆã°ã‘ã‚‰ã®ãˆã³æ—¥è¨˜
ä¾‹ãˆã°ï¼ŒRailsã®å…¥åŠ›ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å¯¾ç–ã¯ã‚»ã‚ãƒ¥ã‚¢ã§ã‚ã‚‹ã¨ã¯è¨€ãˆã¾ã›ã‚“ã€‚Railsã®ãƒãƒªãƒ‡ãƒ¼ã‚·ãƒ§ãƒ³ã¯ã€Œãƒ‡ãƒ¼ã‚¿ãƒ™ãƒ¼ã‚¹ã«ãƒ‡ãƒ¼ã‚¿ãŒä¿å˜ã•ã‚Œã‚‹å‰ã€ã«è¡Œã‚ã‚Œã¾ã™ã€‚ãƒ‡ãƒ¼ã‚¿ãƒ™ãƒ¼ã‚¹ã«ãƒ‡ãƒ¼ã‚¿ã‚’ä¿å˜ã™ã‚‹å¿…è¦ãŒãªã„ã‚ˆã†ãªã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã®å ´åˆï¼Œå…¥åŠ›ã®ãƒãƒªãƒ‡ãƒ¼ã‚·ãƒ§ãƒ³ã‚’ãƒ•ãƒ¬ãƒ¼ãƒ ãƒ¯ãƒ¼ã‚¯ã¨ã—ã¦è¡Œã†ä»•çµ„ã¿ã«ãªã£ã¦ã„ã¾ã›ã‚“ã€‚æœ¬æ¥å…¥åŠ›ã¯ãƒ‡ãƒ¼ã‚¿ãƒ™ãƒ¼ã‚¹åˆ©ç”¨ã®æœ‰ç„¡ã«é–¢ã‚ã‚‰ãšå…¥åŠ›ã‚’å—ã‘å…¥ã‚ŒãŸç›´å¾Œã«è¡Œã†ã¹ãã§ã™ã€‚å¤šãã®ãƒ•ãƒ¬ãƒ¼ãƒ ãƒ¯ãƒ¼ã‚¯ãŒRailsã®å½±éŸ¿ã‚’å—ã‘åŒæ§˜ã®ä»•æ§˜ã¨ãªã£ã¦ã„ã¾ã™ã€‚RailsãŒè„†å¼±ãªä»•æ§˜ã‚’æŽ¡ç”¨ã—ãŸã“ã¨ã¯ä¸å¹¸ãªã“ã¨ã ã£ãŸã¨æ€ã„ã¾ã™ã€‚ â€¦â€¦ã€‚ ã¾ãšã€ãƒãƒªãƒ‡ãƒ¼ã‚·ãƒ§ãƒ³ã¯ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã®ãŸã‚ã«ã™ã‚‹å‡¦ç†ã§ã¯ã‚ã‚Šã¾ã›ã‚“ã€‚ãŸã¾ãŸã¾ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã®å½¹ã«ç«‹ã¤ã“ã¨ã‚‚ã‚ã‚Šã¾ã™ãŒã€å½¹ã«ç«‹ãŸãªã„ã“ã¨ã‚‚ã‚ã‚Šã¾ã™ã€‚ãŸã¨ãˆã°ã€å•ã„åˆã‚ã›ãƒ•ã‚©ãƒ¼ãƒ ã«æœ¬æ–‡ã®å…¥åŠ›æ¬„ãŒã‚ã‚Šã€ä»»æ„ã®ãƒ†ã‚ã‚¹ãƒˆãŒå…¥åŠ›ã§ãã¦ã€DBã«ã¯Textåž‹ (ä»»æ„ã®é•·ã•ã®ä»»æ„ã®ãƒ†ã‚ã‚¹ãƒˆ) ã¨ã—ã¦ä¿å˜
ghostbass 2011/12/11
ãŸã—ã‹symfonyã¯ãƒ‡ãƒ•ã‚©ãƒ«ãƒˆã§ã€Œã™ã¹ã¦ã‚¨ã‚¹ã‚±ãƒ¼ãƒ—ã€ã ã£ãŸæ°—ãŒã™ã‚‹ã€‚Zend_Viewã¯escapeãƒ˜ãƒ«ãƒ‘ãƒ¼ã‚’ä½¿ã†ã€‚cakeã¯ï¼Ÿ

programming

php

security
ãƒªãƒ³ã‚¯
Chrome Remote Desktop : ç•°ãªã‚‹ãƒ‘ã‚½ã‚³ãƒ³ã‚’é éš”æ“ä½œã§ãã‚‹Chromeã®æ‹¡å¼µæ©Ÿèƒ½
Chrome Remote Desktop : ç•°ãªã‚‹ãƒ‘ã‚½ã‚³ãƒ³ã‚’é éš”æ“ä½œã§ãã‚‹Chromeã®æ‹¡å¼µæ©Ÿèƒ½ Chrome Remote Desktop BETA ã€ŽChrome Remote Desktopã€ã¯ä»–ã®ã‚³ãƒ³ãƒ”ãƒ¥ãƒ¼ã‚¿ã‚’é éš”æ“ä½œã™ã‚‹ã“ã¨ãŒã§ãã‚‹ã€ã„ã‚ã‚†ã‚‹ãƒªãƒ¢ãƒ¼ãƒˆãƒ‡ã‚¹ã‚¯ãƒˆãƒƒãƒ—ãƒ„ãƒ¼ãƒ«ã§Googleè£½ã®ãƒ–ãƒ©ã‚¦ã‚¶Chromeã®æ‹¡å¼µæ©Ÿèƒ½ã¨ã—ã¦æä¾›ã•ã‚Œã¦ã„ã‚‹ã‚‚ã®ã§ã™ã€‚ ã¾ãšåˆ©ç”¨ã«ã¯å¤§å‰æã¨ã—ã¦æ“ä½œã•ã‚Œã‚‹ãƒ‘ã‚½ã‚³ãƒ³Aï¼æ“ä½œã™ã‚‹ãƒ‘ã‚½ã‚³ãƒ³Bã®ä¸¡æ–¹ã«ChromeãŒã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã•ã‚Œã¦ã€ã•ã‚‰ã«ã“ã®æ‹¡å¼µãŒä¸¡è€…ã®Chromeã«ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã•ã‚Œã¦ã„ã‚‹ã“ã¨ãŒæ¡ä»¶ã¨ãªã‚Šã¾ã™ã€‚ ã“ã®æ¡ä»¶ã•ãˆæ•´ã£ã¦ã„ã‚Œã°ä½¿ã„æ–¹ã¯ç°¡å˜ã§ã€ã¯ã˜ã‚ã«æ“ä½œã•ã‚Œã‚‹å´AãŒã‚¢ãƒ—ãƒªã‚’èµ·å‹•ã—ã¾ã™ã€‚ ã¤ãŽã«ã‚¢ã‚¯ã‚»ã‚¹è¨±å¯ã‚’ä¸Žãˆã‚‹æ—¨ã®ç¢ºèªãƒšãƒ¼ã‚¸ãŒè¡¨ç¤ºã•ã‚Œã‚‹ã®ã§ãã®é€šã‚Šã‚¢ã‚¯ã‚»ã‚¹è¨±å¯ã‚’ä¸Žãˆã¾ã™ã€‚ï¼ˆâ€»1ï¼‰ ã€Žã“ã®ãƒ‘ã‚½ã‚³ãƒ³ã‚’å…±æœ‰ã™ã‚‹ã€ãƒœã‚¿ãƒ³ã‚’ã‚¯ãƒªãƒƒã‚¯ã™ã‚‹ã¨ã‚³ãƒ¼ãƒ‰ãŒç”Ÿæˆã•ã‚Œã‚‹
ghostbass 2011/10/09
security

webã‚µãƒ¼ãƒ“ã‚¹

programming

ã“ã‚Œã¯ã™ã”ã„
ãƒªãƒ³ã‚¯
ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã®çµ‚äº†æ—¥ã‚’2020å¹´1æœˆ31æ—¥(é‡‘)ã«æ±ºå®šã—ã¾ã—ãŸ - ã¯ã¦ãªã®å‘ŠçŸ¥
ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã®çµ‚äº†æ—¥ã‚’2020å¹´1æœˆ31æ—¥(é‡‘)ã«æ±ºå®šã—ã¾ã—ãŸ ä»¥ä¸‹ã®ã‚¨ãƒ³ãƒˆãƒªã®é€šã‚Šã€ä»Šå¹´æœ«ã‚’ç›®å‡¦ã«ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã‚’çµ‚äº†äºˆå®šã§ã‚ã‚‹æ—¨ã‚’ãŠçŸ¥ã‚‰ã›ã—ã¦ãŠã‚Šã¾ã—ãŸã€‚ 2019å¹´æœ«ã‚’ç›®å‡¦ã«ã€ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã®æä¾›ã‚’çµ‚äº†ã™ã‚‹äºˆå®šã§ã™ - ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—æ—¥è¨˜ ã“ã®ãŸã³ã€æ£å¼ã«çµ‚äº†æ—¥ã‚’æ±ºå®šã„ãŸã—ã¾ã—ãŸã®ã§ã€ä»¥ä¸‹ã®é€šã‚Šã”ç¢ºèªãã ã•ã„ã€‚ çµ‚äº†æ—¥: 2020å¹´1æœˆ31æ—¥(é‡‘) ã‚¨ã‚¯ã‚¹ãƒãƒ¼ãƒˆå¸Œæœ›ç”³è«‹æœŸé™:2020å¹´1æœˆ31æ—¥(é‡‘) çµ‚äº†æ—¥ä»¥é™ã¯ã€ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã®é–²è¦§ãŠã‚ˆã³æŠ•ç¨¿ã¯è¡Œãˆã¾ã›ã‚“ã€‚æ—¥è¨˜ã®ã‚¨ã‚¯ã‚¹ãƒãƒ¼ãƒˆãŒå¿…è¦ãªæ–¹ã¯ä»¥ä¸‹ã®è¨˜äº‹ã«ã—ãŸãŒã£ã¦æ‰‹ç¶šãã‚’ã—ã¦ãã ã•ã„ã€‚ ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã«æŠ•ç¨¿ã•ã‚ŒãŸæ—¥è¨˜ãƒ‡ãƒ¼ã‚¿ã®ã‚¨ã‚¯ã‚¹ãƒãƒ¼ãƒˆã«ã¤ã„ã¦ - ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—æ—¥è¨˜ ã”åˆ©ç”¨ã®ã¿ãªã•ã¾ã«ã¯ã”è¿·æƒ‘ã‚’ãŠã‹ã‘ã„ãŸã—ã¾ã™ãŒã€ã©ã†ãžã‚ˆã‚ã—ããŠé¡˜ã„ã„ãŸã—ã¾ã™ã€‚ 2020-06-25 è¿½è¨˜ ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—æ—¥è¨˜ã®ã‚¨ã‚¯ã‚¹ãƒãƒ¼ãƒˆãƒ‡ãƒ¼ã‚¿ã¯2020å¹´2æœˆ28
ghostbass 2011/09/07
webã‚µãƒ¼ãƒ“ã‚¹

security

programming
ãƒªãƒ³ã‚¯
é«˜æœ¨æµ©å…‰ï¼ è‡ªå®…ã®æ—¥è¨˜ - ä»Šäº•çŒ›å˜‰å‚è€ƒäººæ›°ãã€Œãƒã‚°ãŒé‡å¤§ãªã‚‰å¯ç½°çš„é•æ³•æ€§ã‚’è¶…ãˆã‚‹ç¨‹åº¦ã®é•æ³•æ€§ãŒã‚ã‚‹ã€
â– ä»Šäº•çŒ›å˜‰å‚è€ƒäººæ›°ãã€Œãƒã‚°ãŒé‡å¤§ãªã‚‰å¯ç½°çš„é•æ³•æ€§ã‚’è¶…ãˆã‚‹ç¨‹åº¦ã®é•æ³•æ€§ãŒã‚ã‚‹ã€ å…ˆæ—¥ã®ã€Œãƒã‚°æ”¾ç½®ãŒæä¾›ç½ªã«è©²å½“ã™ã‚‹äº‹æ…‹ã¯ã€Œã‚ã‚‹ã€ã¨æ³•å‹™çœè¦‹è§£ã€ã®ä»¶ã€ãã®4æ—¥å¾Œã®5æœˆ31æ—¥ã«å‚è€ƒäººè³ªç–‘ãŒè¡Œã‚ã‚Œã€æ³•æ”¿å¤§å¦ã®ä»Šäº•çŒ›å˜‰æ•™æŽˆãŒã€æœ‰è˜è€…å‚è€ƒäººã¨ã—ã¦ã€ä¸æ£æŒ‡ä»¤é›»ç£çš„è¨˜éŒ²ã«é–¢ã™ã‚‹ç½ªï¼ˆã„ã‚ã‚†ã‚‹ã€Œã‚¦ã‚¤ãƒ«ã‚¹ä½œæˆç½ªã€ï¼‰ã«ã¤ã„ã¦æ„è¦‹ã‚’è¿°ã¹ã¦ã„ã‚‹ã€‚ã“ã®ä»Šäº•å‚è€ƒäººã¯ã€8å¹´å‰ã®å¹³æˆ15å¹´ã«ã€æ³•åˆ¶å¯©è°ä¼šã®ã€Œåˆ‘äº‹æ³•ï¼ˆãƒã‚¤ãƒ†ã‚¯çŠ¯ç½ªé–¢ä¿‚ï¼‰éƒ¨ä¼šã€ã§ã€ã“ã®æ³•æ¡ˆã®åŽŸæ¡ˆãŒä½œã‚‰ã‚ŒãŸéš›ã«ã€éƒ¨ä¼šã®å¹¹äº‹ã‚’å‹™ã‚ã¦ã„ã‚‰ã—ãŸæ–¹ã ãã†ã ã€‚ ä»Šäº•çŒ›å˜‰å‚è€ƒäººã®ç™ºè¨€å†…å®¹ è¡†è°é™¢ã®ä¼šè°éŒ²ã«å…¨æ–‡ãŒæŽ²è¼‰ã•ã‚Œã¦ã„ã‚‹ã‚ˆã†ã«ã€å‚è€ƒäººã®æ„è¦‹é™³è¿°ã®å¾Œã€è³ªå•ã«ç«‹ã£ãŸå¤§å£å–„å¾³è°å“¡ãŒã€å‰å›žã®æ³•å‹™å¤§è‡£ç”å¼ã‚’è¸ã¾ãˆã¦ã€ä»Šäº•å‚è€ƒäººã«å¯¾ã—ã€ä»¥ä¸‹ã®è³ªå•ã‚’æŠ•ã’ã‹ã‘ã¦ã„ã‚‹ã€‚ â—‹å¤§å£å§”å“¡ ï¼ˆç•¥ï¼‰ãã‚Œã§ã¯ã€ã¾ãšä»Šäº•å…ˆç”Ÿã«ã€å®Ÿä½“æ³•ã®ç«‹å ´ã‹ã‚‰ã€ã“ã®ä¸æ£æŒ‡ä»¤é›»ç£çš„è¨˜éŒ²ä½œæˆç½ªã®æ§‹æˆè¦ä»¶ã®è§£é‡ˆã«ã¤ã„ã¦ãŠä¼ºã„
ghostbass 2011/06/06
ã†ãƒ¼ã‚“

æ³•å¾‹

security

programming
ãƒªãƒ³ã‚¯
SQL Injection Cheat Sheet
ä¾‹; ï¼ˆMSï¼‰ï¼šMySQLã¨SQL Serevr ï¼ˆM*Sï¼‰ï¼šMySQLã®ç‰¹å®šãƒãƒ¼ã‚¸ãƒ§ãƒ³ã‚„ã€é–¢é€£ã™ã‚‹æ³¨æ„äº‹é …ã«è¨˜è¼‰ã•ã‚Œã¦ã„ã‚‹ç‰¹å®šæ¡ä»¶ã«é–¢ã™ã‚‹ã‚‚ã®ã€ãŠã‚ˆã³SQLServerã‚’ç¤ºã™ã€‚ ç›®æ¬¡ SQL Injection Cheat Sheatã«ã¤ã„ã¦ æ–‡æ³•ã®ãƒªãƒ•ã‚¡ãƒ¬ãƒ³ã‚¹ã€æ”»æ’ƒã®ã‚µãƒ³ãƒ—ãƒ«ã€ç‹¡çŒ¾ãªSQLã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³å°æŠ€ 1è¡Œã‚³ãƒ¡ãƒ³ãƒˆ SQLã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³æ”»æ’ƒã®ã‚µãƒ³ãƒ—ãƒ« ã‚¤ãƒ³ãƒ©ã‚¤ãƒ³ã‚³ãƒ¡ãƒ³ãƒˆ å…¸åž‹çš„ãªã‚¤ãƒ³ãƒ©ã‚¤ãƒ³ã‚³ãƒ¡ãƒ³ãƒˆSQLã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³æ”»æ’ƒã®ã‚µãƒ³ãƒ—ãƒ« MySQLãƒãƒ¼ã‚¸ãƒ§ãƒ³æ¤œå‡ºæ”»æ’ƒã®ã‚µãƒ³ãƒ—ãƒ« è¤‡æ–‡ è¤‡æ–‡ã‚’ã‚µãƒãƒ¼ãƒˆã™ã‚‹è¨€èªžã¨ãƒ‡ãƒ¼ã‚¿ãƒ™ãƒ¼ã‚¹ã®ä¸€è¦§ MySQLã¨PHPã«ã¤ã„ã¦ è¤‡æ–‡ã«ã‚ˆã‚‹SQLã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³æ”»æ’ƒã®ã‚µãƒ³ãƒ—ãƒ« Ifå‘½ä»¤æ–‡ MySQLã®Ifå‘½ä»¤æ–‡ SQL Serverã®Ifå‘½ä»¤æ–‡ Ifå‘½ä»¤æ–‡ã‚’åˆ©ç”¨ã—ãŸSQLã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³æ”»æ’ƒã®ã‚µãƒ³ãƒ—ãƒ« æ•°å€¤ã®åˆ©ç”¨ æ–‡å—åˆ—æ“ä½œ æ–‡å—åˆ—é€£çµ
ghostbass 2011/01/28
programming

security
ãƒªãƒ³ã‚¯
1 2 3 æ¬¡ã®ãƒšãƒ¼ã‚¸