[B! Security][development] itboyã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

itboy id:itboy

Securityã¨developmentã«é–¢ã™ã‚‹itboyã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (10)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

Webé–‹ç™ºè€…ãŒãŠã•ãˆã¦ãŠããŸã„10ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£æŠ€è¡“ã€€ï½žã‚«ã‚®ã¯äº‹å‰ã®å¯¾ç–ã«ã‚ã‚Š OWASP Proactive Controls
ã¯ã˜ã‚ã« è„†å¼±æ€§å¯¾å¿œã«è¿½ã‚ã‚Œã‚‹çŠ¶æ³ã¯ã€é–‹ç™ºã‹ã‚‰ãƒ‡ãƒ—ãƒã‚¤ã¾ã§ã®æ™‚é–“ã‚’æµªè²»ã—ã€ã¾ãŸã‚µã‚¤ãƒãƒ¼æ”»æ’ƒã¸ã®å¯¾å¿œåŠ›ã‚’å¼±ã‚ãŒã¡ã§ã™ã€‚ãã“ã§ã€é–‹ç™ºè€…ãŒæœ€åˆã‹ã‚‰ã‚»ã‚ãƒ¥ã‚¢ã«ã‚½ãƒ•ãƒˆã‚¦ã‚§ã‚¢ã‚’æ§‹ç¯‰ã™ã‚‹èƒ½åŠ›ã‚’èº«ã«ã¤ã‘ã‚‹å¿…è¦æ€§ãŒé«˜ã¾ã£ã¦ã„ã¾ã™ã€‚å‰å›žã®è¨˜äº‹ã§ã¯ã€æ·±åˆ»ãªå½±éŸ¿ã®ã‚ã‚‹10ã®è„†å¼±æ€§ã«ã¤ã„ã¦ã¾ã¨ã‚ãŸã€ŒOWASP Top 10ã€ã‹ã‚‰ã€ãã‚Œãžã‚Œã®è„†å¼±æ€§ã«ã¤ã„ã¦ã®è§£èª¬ã‚„ã€é–‹ç™ºè€…ã®æ–¹ã«æ´»ç”¨ã—ã¦ã»ã—ã„OWASPã‚³ãƒŸãƒ¥ãƒ‹ãƒ†ã‚£ã®æˆæžœç‰©ã‚’ç´¹ä»‹ã—ã¾ã—ãŸã€‚OWASP Top 10ã«ã‚ˆã‚Šã‚½ãƒ•ãƒˆã‚¦ã‚§ã‚¢ãƒ»ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã®ä¸–ç•Œã®æ‰‰ã‚’é–‹ããã£ã‹ã‘ã«ãªã‚Œã°å¹¸ã„ã§ã™ã€‚ OWASP Top 10ã§ã¯å„è„†å¼±æ€§ã®æ¦‚è¦ã€è„†å¼±æ€§ã®æœ‰ç„¡ã®ç¢ºèªæ–¹æ³•ã€é˜²æ¢æ–¹æ³•ãªã©ã‚’ç†è§£ã§ãã‚‹ã“ã¨ã‚’ç´¹ä»‹ã—ã¾ã—ãŸã€‚ã“ã®ãƒ‰ã‚ãƒ¥ãƒ¡ãƒ³ãƒˆã¯ã€è„†å¼±æ€§ãã®ã‚‚ã®ã‚’è»¸ã¨ã—ã¦èª¬æ˜ŽãŒãªã•ã‚Œã¦ã„ã‚‹ã“ã¨ã‹ã‚‰ã€äº‹å‰ã®å¯¾ç–ã€ã™ãªã‚ã¡è„†å¼±æ€§ãŒç™ºç”Ÿã—ãªã„ã‚ˆã†ã«ã™ã‚‹ãŸã‚ã®é˜²æ¢æ–¹æ³•ã‚’è»¸ã¨ã—ã¦è¦‹ãŸè¦–ç‚¹ã¨ã¯ç•°ãªã£ã¦ã„ã¾ã™ã€‚ãã®
itboy 2015/12/04
security

development
ãƒªãƒ³ã‚¯
SEãƒ»ãƒ—ãƒã‚°ãƒ©ãƒžãŒçŸ¥ã£ã¦ã‚‹ã¨ä¾¿åˆ©ãªè„†å¼±æ€§ãƒã‚§ãƒƒã‚¯ãƒ„ãƒ¼ãƒ« 5 ã¤ | ãƒã‚·ãƒ£ãƒã‚°ã€‚
æ±äº¬ãƒ©ãƒ¼ãƒ¡ãƒ³ã‚·ãƒ§ãƒ¼2011 ã„ãã¦ãƒ¼ãƒ¼ãƒ¼ï¼ã¿ãªã•ã‚“ã“ã‚“ã«ã¡ã¯ã€nakamura ã§ã™ã€‚ ä»Šæ—¥ã¯ãƒ—ãƒã‚°ãƒ©ãƒžã ã£ãŸã‚Šã‚µãƒ¼ãƒç®¡ç†è€…ã ã£ãŸã‚Šï¼ˆã‚‚ã—ãã¯ãã®ä¸¡æ–¹ã ã£ãŸã‚Šï¼‰ã™ã‚‹æ–¹ã«ãŠå‹§ã‚ã—ãŸã„ã‚µã‚¤ãƒˆã¨ãƒ„ãƒ¼ãƒ«ã‚’ã„ãã¤ã‹ã”ç´¹ä»‹ã—ã¾ã™ã€‚ç´°ã‹ã„è„†å¼±æ€§ã®ãƒã‚§ãƒƒã‚¯ç‰ã©ã†ã—ã¦ã‚‚æ‰‹é–“ãŒæŽ›ã‹ã‚‹ã‚‚ã®ãŒå¤šã„ã§ã™ãŒã€ä»Šå›žã”ç´¹ä»‹ã™ã‚‹ãƒ„ãƒ¼ãƒ«ã‚’ã†ã¾ãä½¿ã†ã¨ãã®è¾ºã‚Šã ã„ã¶åŠ¹çŽ‡ã‚ˆãã§ãã‚‹ã¨æ€ã„ã¾ã™ã‚ˆï¼ WEB ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³é–¢é€£ XSS Me XSS Me :: Add-ons for Firefox XSS ã®ãƒ†ã‚¹ãƒˆã‚’ã‚ã‚‹ç¨‹åº¦è‡ªå‹•åŒ–ã—ã¦ãã‚Œã‚‹ Firefox ã®ã‚¢ãƒ‰ã‚ªãƒ³ã§ã™ã€‚æ®‹å¿µãªãŒã‚‰ Firefox3.0.* ç³»ã®é ƒã«é–‹ç™ºãŒæ¢ã¾ã£ã¦ã—ã¾ã£ã¦ã„ã‚‹ã‚ˆã†ã§ã™ãŒã€åƒ•ã®ç’°å¢ƒã§ã¯ install.rdf ã®æ›¸ãæ›ãˆã§å•é¡Œãªãå‹•ä½œã—ã¦ã„ã¾ã™ã€‚ï¼ˆWindows7 64bit + Firefox7.0.1ï¼‰ SQL Inject Me SQL I
itboy 2011/11/02
XSS

security

development
ãƒªãƒ³ã‚¯
Webã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³å‘ã‘ã®è‡ªå‹•ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚¹ã‚ãƒ£ãƒŠã€ŒSkipfishã€ã‚’è©¦ã—ã¦ã¿ã¾ã—ãŸ
ã“ã‚“ã«ã¡ã¯ã€ä¸å·ã§ã™ã€‚ å…ˆæ—¥ã€Googleã‹ã‚‰Webã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³å‘ã‘ã®è‡ªå‹•ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚¹ã‚ãƒ£ãƒŠã€ŒSkipfishã€ãŒå…¬é–‹ã•ã‚ŒãŸã®ã§ã€ç¤¾å†…ã§åˆ©ç”¨ã—ã¦ã„ã‚‹CakePHPã®ã‚¢ãƒ—ãƒªã§è©¦ã—ã¦ã¿ã¾ã—ãŸã€‚ Skipfish( http://code.google.com/p/skipfish/ )ã¯ã€Webã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã®è„†å¼±æ€§ã€SQLã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³ã‚„ã‚¯ãƒã‚¹ã‚µã‚¤ãƒˆã‚¹ã‚¯ãƒªãƒ—ãƒ†ã‚£ãƒ³ã‚°ç‰ã‚’è‡ªå‹•çš„ã«æ¤œå‡ºã—ã¦ãã‚Œã‚‹Apache License 2.0ã®ãƒ©ã‚¤ã‚»ãƒ³ã‚¹ã§å…¬é–‹ã•ã‚Œã¦ã„ã‚‹ã‚ªãƒ¼ãƒ—ãƒ³ã‚½ãƒ¼ã‚¹ã®ãƒ„ãƒ¼ãƒ«ã§ã™ã€‚ å¿…è¦ãªãƒ©ã‚¤ãƒ–ãƒ©ãƒªã¯ä»¥ä¸‹ã¨ã®ã“ã¨ã€‚ *Â GNUÂ CÂ Compiler *Â GNUÂ Make *Â GNUÂ CÂ LibraryÂ (includingÂ developmentÂ headers) *Â zlibÂ (includingÂ developmentÂ headers) *Â OpenSSLÂ (including
itboy 2010/04/08
development

google

security
ãƒªãƒ³ã‚¯
Googleã€Webã‚¢ãƒ—ãƒªå‘ã‘ã®é«˜é€Ÿãªè„†å¼±æ€§ã‚¹ã‚ãƒ£ãƒŠã€ŒSkipfishã€ã‚’å…¬é–‹
Googleã¯3æœˆ19æ—¥ã€Webã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³å‘ã‘ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£è„†å¼±æ€§ã‚¹ã‚ãƒ£ãƒŠã€ŒSkipfishã€ã‚’å…¬é–‹ã—ãŸã€‚èª¤æ¤œçŸ¥ã‚’æŠ‘ãˆãŸé«˜åº¦ãªã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒã‚§ãƒƒã‚¯ã‚’å°Žå…¥ã€ã¨ã‚‰ãˆã«ãã„ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ›ãƒ¼ãƒ«ã‚’æ¤œå‡ºã§ãã‚‹ã¨ã—ã¦ã„ã‚‹ã€‚ ç±³Googleã¯3æœˆ19æ—¥ã€Webã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³å‘ã‘ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£è„†å¼±æ€§ã‚¹ã‚ãƒ£ãƒŠã€ŒSkipfishã€ã‚’å…¬é–‹ã—ãŸã€‚ç¾åœ¨æœ€æ–°ç‰ˆã¨ãªã‚‹ãƒãƒ¼ã‚¸ãƒ§ãƒ³1.1Î²ã®ã‚³ãƒ¼ãƒ‰ãŒå…¬é–‹ã•ã‚Œã¦ã„ã‚‹ã€‚ Skipfishã¯ã‚¯ãƒã‚¹ã‚µã‚¤ãƒˆã‚¹ã‚¯ãƒªãƒ—ãƒ†ã‚£ãƒ³ã‚°ã€SQLã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³ãªã©ã€Webã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã§ç™ºç”Ÿã™ã‚‹å¯èƒ½æ€§ã®ã‚ã‚‹ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ›ãƒ¼ãƒ«ã‚’ã‚¹ã‚ãƒ£ãƒ³ã—ã¦æ¤œå‡ºã™ã‚‹ãƒ„ãƒ¼ãƒ«ã€‚èª¤æ¤œçŸ¥ã‚’æŠ‘ãˆãŸé«˜åº¦ãªã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒã‚§ãƒƒã‚¯ã‚’å°Žå…¥ã€ã¨ã‚‰ãˆã«ãã„ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ›ãƒ¼ãƒ«ã‚’æ¤œå‡ºã§ãã‚‹ã¨ã—ã¦ã„ã‚‹ã€‚Cã§å®Ÿè£…ã•ã‚Œã¦ãŠã‚Šã€HTTPãƒãƒ³ãƒ‰ãƒªãƒ³ã‚°å‘ã‘ã«æœ€é©åŒ–ã™ã‚‹ã“ã¨ã§é€Ÿåº¦ã‚’æ”¹å–„ã€LANç’°å¢ƒã§æ¯Žç§’2000ä»¶ä»¥ä¸Šã®HTTPè¦æ±‚ã‚’å‡¦ç†ã§ãã‚‹ã¨ã„ã†ã€‚
itboy 2010/03/24
security

google

development
ãƒªãƒ³ã‚¯
IPAã€WAFã®å°Žå…¥æ–¹æ³•ã‚’è§£èª¬ã™ã‚‹è³‡æ–™ã‚’å…¬é–‹
IPAã¯ã€Webã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ãƒ•ã‚¡ã‚¤ã‚¢ã‚¦ã‚©ãƒ¼ãƒ«ã®ç‰¹å¾´ã‚„å°Žå…¥æ–¹æ³•ãªã©ã‚’ç´¹ä»‹ã™ã‚‹ã€ŒWeb Application Firewall èªæœ¬ã€ã‚’å…¬é–‹ã—ãŸã€‚ æƒ…å ±å‡¦ç†æŽ¨é€²æ©Ÿæ§‹ï¼ˆIPAï¼‰ã¯2æœˆ16æ—¥ã€Webã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ãƒ•ã‚¡ã‚¤ã‚¢ã‚¦ã‚©ãƒ¼ãƒ«ï¼ˆWAFï¼‰ã®ç‰¹å¾´ã‚„å°Žå…¥æ–¹æ³•ãªã©ã‚’è§£èª¬ã™ã‚‹ã€ŒWeb Application Firewall èªæœ¬ã€ã‚’ã‚µã‚¤ãƒˆä¸Šã§å…¬é–‹ã—ãŸï¼ˆPDFãƒ•ã‚¡ã‚¤ãƒ«ï¼‰ã€‚ åŒè³‡æ–™ã¯ã€Webã‚µã‚¤ãƒˆé‹å–¶è€…ãŒWAFã®å°Žå…¥ã‚’æ¤œè¨Žã™ã‚‹éš›ã«ã€WAFã®ç†è§£ã‚’æ‰‹åŠ©ã‘ã¨ãªã‚‹ç›®çš„ã§ä½œæˆã—ãŸã‚‚ã®ã€‚WAFã®æ¦‚è¦ã‚„æ©Ÿèƒ½ã®è©³ç´°ã€å°Žå…¥ã«ãŠã‘ã‚‹ãƒã‚¤ãƒ³ãƒˆã€ã¾ãŸã€éŸ“å›½ã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆæŒ¯èˆˆé™¢ï¼ˆKISAï¼‰ã‚„Open Web Application Security Projectã€Web Application Security Consortiumã«ãŠã‘ã‚‹å–ã‚Šçµ„ã¿ãªã©ã€å…¨50ãƒšãƒ¼ã‚¸ã§æ§‹æˆã•ã‚Œã¦ã„ã‚‹ã€‚ è¿‘å¹´ã¯SQLã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³æ”»æ’ƒãªã©
itboy 2010/02/17
ã‚ã¨ã§èªã‚€

security

development
ãƒªãƒ³ã‚¯
https://jp.techcrunch.com/2009/09/24/20090923basic-flaw-reveals-source-code-to-3300-popular-websites/
itboy 2009/09/24
security

development
ãƒªãƒ³ã‚¯
PHPä»¥å¤–ã§ã¯: æ—¢ã«ã‚ãŸã‚Šå‰ã«ãªã‚Šã¤ã¤ã‚ã‚‹æ–‡å—ã‚¨ãƒ³ã‚³ãƒ¼ãƒ‡ã‚£ãƒ³ã‚°ãƒãƒªãƒ‡ãƒ¼ã‚·ãƒ§ãƒ³ - å¾³ä¸¸æµ©ã®æ—¥è¨˜(2009-09-14)
_æ—¢ã«ã‚ãŸã‚Šå‰ã«ãªã‚Šã¤ã¤ã‚ã‚‹æ–‡å—ã‚¨ãƒ³ã‚³ãƒ¼ãƒ‡ã‚£ãƒ³ã‚°ãƒãƒªãƒ‡ãƒ¼ã‚·ãƒ§ãƒ³ å¤§åž£é–ç”·ã•ã‚“ã®æ—¥è¨˜ã€Œä½•æ•…ã‹ã‚ãŸã‚Šå‰ã«ãªã‚‰ãªã„æ–‡å—ã‚¨ãƒ³ã‚³ãƒ¼ãƒ‡ã‚£ãƒ³ã‚°ãƒãƒªãƒ‡ãƒ¼ã‚·ãƒ§ãƒ³ã€ã«ç«¯ã‚’ç™ºã—ã¦ã€å…¥åŠ›ãƒ‡ãƒ¼ã‚¿ãªã©ã®æ–‡å—ã‚¨ãƒ³ã‚³ãƒ¼ãƒ‡ã‚£ãƒ³ã‚°ã®å¦¥å½“æ€§ãƒã‚§ãƒƒã‚¯ã‚’ã©ã†è¡Œã†ã‹ãŒè°è«–ã«ãªã£ã¦ã„ã¾ã™ã€‚ãƒã‚§ãƒƒã‚¯è‡ªä½“ãŒå¿…è¦ã§ã‚ã‚‹ã“ã¨ã¯çš†ã•ã‚“åŒæ„ã®ã‚ˆã†ã§ã™ãŒã€ ãƒã‚§ãƒƒã‚¯æ‹…å½“ã¯ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã‹ã€åŸºç›¤ã‚½ãƒ•ãƒˆï¼ˆè¨€èªžã€ãƒ•ãƒ¬ãƒ¼ãƒ ãƒ¯ãƒ¼ã‚¯ãªã©ï¼‰ã‹ å…¥åŠ›ãƒ»å‡¦ç†ãƒ»å‡ºåŠ›ã®ã©ã“ã§ãƒã‚§ãƒƒã‚¯ã™ã‚‹ã®ã‹ ã¨ã„ã†ç‚¹ã§ã€ã•ã¾ã–ã¾ãªæ„è¦‹ãŒå¯„ã›ã‚‰ã‚Œã¦ã„ã¾ã™ã€‚å¤§åž£ã•ã‚“è‡ªèº«ã¯ã€ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ãŒå…¥åŠ›æ™‚ç‚¹ã§ãƒã‚§ãƒƒã‚¯ã™ã¹ãã¨ä¸»å¼µã•ã‚Œã¦ã„ã¾ã™ã€‚ã“ã‚Œã«å¯¾ã—ã¦ã€ã„ã‚„åŸºç›¤ã‚½ãƒ•ãƒˆã§ãƒã‚§ãƒƒã‚¯ã™ã¹ãã ã¨ã‹ã€æ–‡å—åˆ—ã‚’ã€Œä½¿ã†ã¨ãã€ã«ãƒã‚§ãƒƒã‚¯ã™ã¹ãã ã¨ã„ã†æ„è¦‹ãŒå‡ºã¦ã„ã¾ã™ã€‚ ãŸã¨ãˆã°ã€id:ikepyonã®æ—¥è¨˜ã€Œ[ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£]ä½•æ•…ã‹ã‚ãŸã‚Šå‰ã«ãªã‚‰ãªã„æ–‡å—ã‚¨ãƒ³ã‚³ãƒ¼ãƒ‡ã‚£ãƒ³ã‚°ãƒãƒªãƒ‡ãƒ¼ã‚·ãƒ§ãƒ³ã€ã§ã¯ã€ã“ã®ãƒã‚§ãƒƒã‚¯ã¯åŸºç›¤ã‚½ãƒ•
itboy 2009/09/15
development

php

programming

security
ãƒªãƒ³ã‚¯
UTF-8ã®å†—é•·ãªã‚¨ãƒ³ã‚³ãƒ¼ãƒ‰ã¨ã¯ä½•ã§ã€ãªã‚“ã§ãã‚ŒãŒã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£çš„ã«å±ãªã„ã®ã‹ï¼Ÿã‚’æ–‡å—ã‚³ãƒ¼ãƒ‰çŸ¥è˜ãƒ¬ãƒ´ã‚§ãƒ«3ãã‚‰ã„ã®å‡¡ãƒ—ãƒã‚°ãƒ©ãƒžãŒè€ƒãˆã¦ã¿ã‚‹ - tohokuaikiã®ãƒãƒ©ã‚·ã®è£
ä½•æ•…ã‹ã‚ãŸã‚Šå‰ã«ãªã‚‰ãªã„æ–‡å—ã‚¨ãƒ³ã‚³ãƒ¼ãƒ‡ã‚£ãƒ³ã‚°ãƒãƒªãƒ‡ãƒ¼ã‚·ãƒ§ãƒ³ | yohgaki's blog ã£ã¦ã‚ã‚‹ã‚ˆã†ã«ã€ã„ã¾ã„ã¡æ–‡å—ã‚³ãƒ¼ãƒ‰ã®ä¸æ£ãªåˆ¤å®šã«ã‚ˆã‚‹å±é™ºæ€§ã£ã¦ã®ãŒåˆ†ã‹ã£ã¦ãªã„ã€‚ SJISã®å•é¡Œã¯ã€ï¼ˆ2/3ï¼‰SQLã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³ã‚’æ ¹çµ¶ï¼ã‚»ã‚ãƒ¥ã‚¢é–‹ç™ºã®æ¥µæ„ - ç¬¬5å›žâ– æ³¨ç›®ã•ã‚Œã‚‹æ–‡å—ã‚³ãƒ¼ãƒ‰ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å•é¡Œï¼šITproã®è¨˜äº‹ãŒã‚ã‹ã‚Šã‚„ã™ã‹ã£ãŸã€‚ ã¨ã„ã†ã‹ã€ã‚„ã£ã±ã‚ŠPHPä½¿ã£ã¦ã‚‹ã¨èª°ã§ã‚‚ä¸€åº¦ã¯ã€Œãªã‚“ã˜ã‚ƒã“ã®ã€Žï¿¥ã€ã¯ï¼Ÿã€ã£ã¦æ€ã†ã‚‚ã‚“ãªã‚“ã§ã€‚ ãªã‚‹ã»ã©ã€ç¢ºã‹ã«â†“ã®å›³ã®ã‚ˆã†ã«ã€Œã‚ã‚‹ãƒã‚¤ãƒˆã€ãŒ2ã¤ã®æ„å‘³ã‚’æŒã¤ã£ã¦ã„ã†æ–‡å—ã‚³ãƒ¼ãƒ‰å½¢æ…‹ã¯ã‚„ã°ã„ã‚“ã ãªã¨ã€‚ EUC-JPã¯ãã‚“ãªã“ã¨ã¯ã—ãªã„ã§ã€1ã¤ã®ãƒã‚¤ãƒˆã«ã¯1ã¤ã®æ„å‘³ã—ã‹å–ã‚‰ã›ãªã„ã€‚ ã ã‘ã©ã€ã“ã‚Œã§ã‚‚æ–‡å—åŒ–ã‘ãŒèµ·ã“ã‚‹ã“ã¨ãŒã‚ã‚‹ã€‚çµŒé¨“çš„ã«ã¯ã€ã€Œãƒžãƒ«ãƒãƒã‚¤ãƒˆã‚’XXæ–‡å—ã§åˆ‡ã‚Šè½ã¨ã—ãŸã„ã€ã¨ã‹ã‚„ã£ãŸå ´åˆã€‚ã¡ã‚ƒã‚“ã¨æ–‡å—ã‚³ãƒ¼ãƒ‰ã‚’åˆ¤å®šã—ã¦ãã‚Œã‚‹PHPã§ã„ãˆã°mb_subst
itboy 2009/09/11
programming

security

development
ãƒªãƒ³ã‚¯
Webã‚¢ãƒ—ãƒªã«ãŠã‘ã‚‹11ã®è„†å¼±æ€§ã®å¸¸è˜ã¨å¯¾ç–
Webã‚¢ãƒ—ãƒªã«ãŠã‘ã‚‹11ã®è„†å¼±æ€§ã®å¸¸è˜ã¨å¯¾ç–ï¼šWebã‚¢ãƒ—ãƒªã®å¸¸è˜ã‚’JSPã¨Strutsã§èº«ã«ã¤ã‘ã‚‹ï¼ˆ11ï¼‰ï¼ˆ1/4 ãƒšãƒ¼ã‚¸ï¼‰ æœ¬é€£è¼‰ã¯ã€JSPï¼ã‚µãƒ¼ãƒ–ãƒ¬ãƒƒãƒˆï¼‹Strutsã®Webã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³é–‹ç™ºã‚’é€šã˜ã¦ã€Javaè¨€èªžä»¥å¤–ï¼ˆPHPã‚„ASP.NETã€Ruby on Railsãªã©ï¼‰ã®é–‹ç™ºã«ã‚‚é€šç”¨ã™ã‚‹Webã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³å…¨èˆ¬ã®åºƒã„çŸ¥è˜ãƒ»å¸¸è˜ã‚’èº«ã«ä»˜ã‘ã‚‹ãŸã‚ã®é€£è¼‰ã§ã™ ã€2013å¹´2æœˆ25æ—¥ã€‘ç·¨é›†éƒ¨ã‚ˆã‚Šã€ãŠã‚ã³ã¨è¨‚æ£ã®ãŠçŸ¥ã‚‰ã› æœ¬ç¨¿ã«ãŠã„ã¦èªè€…ã®çš†ã•ã¾ã‚ˆã‚Šå¤šæ•°ã®ã”æŒ‡æ‘˜ã‚’ã„ãŸã ãã¾ã—ã¦ã€èª ã«ã‚ã‚ŠãŒã¨ã†ã”ã–ã„ã¾ã™ã€‚ç·¨é›†éƒ¨ã§ã‚ã‚‰ãŸã‚ã¦èª¿ã¹ãŸçµæžœã€é–“é•ã„ã‚’æŠŠæ¡ã—ã€ã‚ã‚‰ãŸã‚ã¦ä¿®æ£ç‰ˆã‚’æŽ²è¼‰ã•ã›ã¦ã„ãŸã ãã¾ã™ã€‚ã“ã®åº¦ã¯ã€é•·æœŸã«ã‚ãŸã‚Šèª¤ã£ãŸå†…å®¹ã‚’æŽ²è¼‰ã—ãŸã®ã§ã€èªè€…ã®çš†ã•ã¾ã«å¤šå¤§ãªã”è¿·æƒ‘ã‚’ãŠæŽ›ã‘ã—ãŸã—ãŸç‚¹ã‚’ãŠã‚ã³ç”³ã—ä¸Šã’ã¾ã™ã€‚ é€šå¸¸ã€è¨˜äº‹ã«é–“é•ã„ãŒã‚ã£ãŸå ´åˆã«ã¯ã€ç†è€…ç¢ºèªå¾Œã«ä¿®æ£ç‰ˆã‚’æŽ²è¼‰ã™ã‚‹ã®ã§ã™ãŒã€ä»Šå›žã®å ´
itboy 2009/09/02
programming

development

security
ãƒªãƒ³ã‚¯
é«˜æœ¨æµ©å…‰ï¼ è‡ªå®…ã®æ—¥è¨˜ - ã‚„ã¯ã‚Šé€€åŒ–ã—ã¦ã„ãŸæ—¥æœ¬ã®Webé–‹ç™ºè€…ã€Œãƒ‹ã‚³ãƒ‹ã‚³å‹•ç”»Ã—iPhone OSã€ã®å ´åˆ
â– ã‚„ã¯ã‚Šé€€åŒ–ã—ã¦ã„ãŸæ—¥æœ¬ã®Webé–‹ç™ºè€…ã€Œãƒ‹ã‚³ãƒ‹ã‚³å‹•ç”»Ã—iPhone OSã€ã®å ´åˆ ä¸€å¹´å‰ã€ã€Œé€€åŒ–ã—ã¦ã‚†ãæ—¥æœ¬ã®Webé–‹ç™ºè€…ã€ã¨ã„ã†é¡Œã§ã€ã‚±ãƒ¼ã‚¿ã‚¤Webã®æŠ€è¡“é¢ã§ã®è›¸å£ºåŒ–ã«ã¤ã„ã¦æ¬¡ã®ã‚ˆã†ã«æ›¸ã„ãŸã€‚ iPhoneã«å¥‘ç´„è€…å›ºæœ‰IDé€ä¿¡æ©Ÿèƒ½ãŒæè¼‰ã•ã‚Œã‚‹æ—¥ ï¼ˆç•¥ï¼‰ã“ã†ã—ã¦é€€åŒ–ã—ã¦ã‚†ãã‚±ãƒ¼ã‚¿ã‚¤WebãŒã€æ—¥æœ¬ã®ã‚¹ã‚¿ãƒ³ãƒ€ãƒ¼ãƒ‰ã¨ãªã£ã¦ã—ã¾ã„ã€ã„ã¤ã®æ—¥ã‹ã€PCå‘ã‘ã®æ™®é€šã®ã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆã¾ã§ã€å˜ä¸€IDã®å…¨ã‚µã‚¤ãƒˆé€ä¿¡ãŒå¿…é ˆã«ãªã£ã¦ã—ã¾ã†ã®ã§ã¯ãªã„ã‹ã¨å±æƒ§ã—ãŸã€‚ ï¼ˆç•¥ï¼‰iPod touchã§NAVITIMEã‚’å‹•ã‹ã—ã¦ã¿ãŸã¨ã“ã‚ã€ä¸‹ã®å›³ã®ã‚ˆã†ã«ãªã£ãŸã€‚ ï¼ˆç•¥ï¼‰å¥‘ç´„è€…å›ºæœ‰IDãŒãªã„ã¨ã©ã†ã‚„ã£ã¦ä¼šå“¡ç™»éŒ²ã‚·ã‚¹ãƒ†ãƒ ã‚’ä½œã£ãŸã‚‰ã„ã„ã®ã‹ã‚ã‹ã‚‰ãªã„ã‚“ã˜ã‚ƒãªã„ã®ã‹â€¦â€¦ã¨ã„ã†ã®ã¯ã•ã™ãŒã«ç©¿ã¡éŽãŽã ã¨æ€ã„ãŸã„ã€‚NAVITIMEã‹ã‚‰ã‚½ãƒ•ãƒˆãƒãƒ³ã‚¯ãƒ¢ãƒã‚¤ãƒ«ã«å¯¾ã—ã¦ã€å¥‘ç´„è€…å›ºæœ‰IDé€ä¿¡ç”¨ãƒ—ãƒã‚ã‚·ã‚µãƒ¼ãƒã®ç”¨æ„ã‚’è¦è«‹ã—ã¦ã„ã‚‹â€¦â€¦ãªã‚“ã¦ã“ã¨ãŒãªã‘ã‚Œ
itboy 2009/08/03
development

security

webã‚µãƒ¼ãƒ“ã‚¹

mobile
ãƒªãƒ³ã‚¯
1