[B! ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£] bushimichiã®ãƒ

bushimichi id:bushimichi

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã«é–¢ã™ã‚‹bushimichiã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (22)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

PHPã§ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚’çœŸé¢ç›®ã«è€ƒãˆã‚‹
ã‚ªãƒ¼ãƒ—ãƒ³ã‚½ãƒ¼ã‚¹ã‚«ãƒ³ãƒ•ã‚¡ãƒ¬ãƒ³ã‚¹2011 Hokkaido #osc11do ã€ŒPHPã§ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚’çœŸé¢ç›®ã«è€ƒãˆã‚‹ã€ LOCAL PHPéƒ¨ã€€ä½è—¤ç¢å“‰ï¼ˆ@nazoï¼‰ http://labs.nazone.info/Read less
bushimichi 2011/06/20
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

php
ãƒªãƒ³ã‚¯
ã“ã‚Œãã‚‰ã„ã‚„ã£ã¨ã‘ã€€ã€œLinuxã‚µãƒ¼ãƒã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£è¨å®šã€œ - nabeã®é›‘è¨˜å¸³
ç®¡ç†ä¸ã®ã‚µãƒ¼ãƒã§è¡Œã£ã¦ã„ã‚‹ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£è¨å®šã‚’å…¬é–‹ã—ã¾ã™ã€‚æœ¬å½“ã¯ã“ã†ã„ã†ã“ã¨ã‚’å…¬é–‹ã™ã‚‹ã®ã¯ã‚ˆã‚ã—ããªã„ã®ã§ã™ãŒã€è„†å¼±ã‚µãƒ¼ãƒãŒæ°¾æ¿«ã—ã¦ã„ã‚‹ç¾çŠ¶ãã“ãŒè¸ã¿å°ã¨ãªã£ã¦sshã‚¢ã‚¿ãƒƒã‚¯ã•ã‚Œã‚‹ã®ã‚‚è¿·æƒ‘æ¥µã¾ã‚Šãªã„ã®ã§ã€æœ€ä½Žé™ã‚„ã£ã¨ã‘ã¨ã„ã†å†…å®¹ã§ã¾ã¨ã‚ã¾ã—ãŸã€‚*1 èµ·å‹•ã‚µãƒ¼ãƒ“ã‚¹ã¨æ¦‚è¦ iptables/Firewallã®è¨å®š iptablesã®ä¸èº« limit-burstã«ã¤ã„ã¦ hashlimitã«ã¤ã„ã¦ hosts.allow/hosts.deny(TCP Wrapper)ã®è¨å®š sshdã®è¨å®š ãã®ä»–ã®è¨å®š Apacheã®è¨å®š Postfixã®è¨å®š Dovecotã®è¨å®š ã¾ã¨ã‚ èµ·å‹•ã‚µãƒ¼ãƒ“ã‚¹ã¨æ¦‚è¦ Apache (www) sshd smtp/pop bind (DNS) ntpd ã„ãã¤ã‹ã®æ³¨æ„ç‚¹ã€‚ sftpã§ååˆ†ãªã®ã§ftpdã¯ä½¿ã‚ãªã„ã€‚WinSCPç‰ã‚’ä½¿ãˆã°ffftpã«ä¾å˜ã™ã‚‹å¿…è¦ã¯ãªã„ã€‚*2
bushimichi 2011/04/28
ã‚µãƒ¼ãƒ

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

iptables
ãƒªãƒ³ã‚¯
ã‚¦ã‚§ãƒ–ãƒ–ãƒ©ã‚¦ã‚¶ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚’ãƒ†ã‚¹ãƒˆã™ã‚‹5ã¤ã®ã‚¦ã‚§ãƒ–ã‚µã‚¤ãƒˆ
ï¼ƒ2ï¼šBrowserSpy.dk 2009å¹´ã«ç†è€…ã¯Panopticlickã«ã¤ã„ã¦ã®è¨˜äº‹ã‚’åŸ·ç†ã—ãŸã€‚ãã®å¾Œã€ç†è€…ã¯BrowserSpy.dkã¨ã„ã†åŒç¨®ã®ã‚¦ã‚§ãƒ–ã‚µã‚¤ãƒˆã‚’è¦‹ã¤ã‘ãŸï¼ˆå›³Bï¼‰ã€‚ã“ã®ã‚µã‚¤ãƒˆã§ã¯ã€Panopticlickã¨åŒæ§˜ã®ãƒ†ã‚¹ãƒˆã®ä»–ã«ã‚‚64ç¨®é¡žã®ãƒ†ã‚¹ãƒˆãŒå®Ÿæ–½ã•ã‚Œã‚‹ã€‚ãŸã ã—ã€æ®‹å¿µãªã“ã¨ã«BrowserSpy.dkã¯å•é¡Œã®è§£æ±ºæ–¹æ³•ã‚’æç¤ºã—ã¦ãã‚Œãªã„ã€‚ã¨ã¯è¨€ã†ã‚‚ã®ã®ã€ã‚¦ã‚§ãƒ–ã‚µã‚¤ãƒˆã«ã‚¢ã‚¯ã‚»ã‚¹ã—ãŸéš›ã«ã€ã©ã‚Œã ã‘ã®æƒ…å ±ãŒå±é™ºã«ã•ã‚‰ã•ã‚Œã‚‹ã®ã‹ã‚’å®Ÿéš›ã«è¦‹ã›ã¦ãã‚Œã‚‹ã‚ã‘ã ã€‚ ï¼ƒ3ï¼šPC Flank PC Flankã¯ã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆã¨ã„ã†è¦³ç‚¹ã‹ã‚‰è¦‹ãŸã‚³ãƒ³ãƒ”ãƒ¥ãƒ¼ã‚¿ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚’ç¶²ç¾…çš„ã«ãƒ†ã‚¹ãƒˆã—ã¦ãã‚Œã‚‹ã‚¦ã‚§ãƒ–ã‚µã‚¤ãƒˆã§ã‚ã‚‹ã€‚ãƒ†ã‚¹ãƒˆã«ã¯ã€ŒStealth Testã€ã‚„ã€ŒAdvanced Port Scanner Testã€ã€ŒTrojans Testã€ã€ŒExploits Testã€ã€ŒBrowser Test
bushimichi 2010/08/17
webã‚µãƒ¼ãƒ“ã‚¹

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
ãƒªãƒ³ã‚¯
iptablesã§ã§ãã‚‹DoSï¼DDoSå¯¾ç–
ã¯ã˜ã‚ã« ä»Šå›žã¯DoSï¼DDoSå¯¾ç–ã‚’ç´¹ä»‹ã—ã¾ã™ã€‚ä»Šå›žã¯iptablesã‚’ä½¿ã£ãŸæ–¹æ³•ã¨ã¨ã‚‚ã«ã€Linuxã®ã‚«ãƒ¼ãƒãƒ«ãƒ‘ãƒ©ãƒ¡ãƒ¼ã‚¿ã‚’ä½¿ã£ãŸæ–¹æ³•ã‚‚ç´¹ä»‹ã—ã¾ã™ã€‚ é–¢é€£ãƒªãƒ³ã‚¯ï¼š â†’Linuxã§ä½œã‚‹ãƒ•ã‚¡ã‚¤ã‚¢ã‚¦ã‚©ãƒ¼ãƒ«ï¼»ãƒ‘ã‚±ãƒƒãƒˆãƒ•ã‚£ãƒ«ã‚¿ãƒªãƒ³ã‚°è¨å®šç·¨ï¼½ http://www.atmarkit.co.jp/flinux/rensai/security05/security05a.html â†’é€£è¼‰è¨˜äº‹ ã€Œç¿’ã†ã‚ˆã‚Šæ…£ã‚Œã‚ï¼ iptablesãƒ†ãƒ³ãƒ—ãƒ¬ãƒ¼ãƒˆé›†ã€ http://www.atmarkit.co.jp/flinux/index/indexfiles/iptablesindex.html â†’é€£è¼‰è¨˜äº‹ ã€Œç¿’ã†ã‚ˆã‚Šæ…£ã‚Œã‚ï¼ iptablesãƒ†ãƒ³ãƒ—ãƒ¬ãƒ¼ãƒˆé›† æ”¹è¨‚ç‰ˆã€ http://www.atmarkit.co.jp/flinux/index/indexfiles/newiptablesindex.html DoSï¼
bushimichi 2010/07/16
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

Linux

iptables
ãƒªãƒ³ã‚¯
åˆå¿ƒè€…Webã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³é–‹ç™ºè€…ãŒãƒã‚§ãƒƒã‚¯ã™ã¹ãæƒ…å ±æº - ãƒãƒ‹ãƒ¼ãƒãƒƒã‚¿ãƒ¼ã®éƒ¨å±‹
åˆå¿ƒè€…Webã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³é–‹ç™ºè€…ãŒãƒã‚§ãƒƒã‚¯ã™ã¹ãæƒ…å ±æºã‚’é›†ã‚ã¦ã¿ãŸã€‚ä»–ã«è¿½åŠ ã—ãŸæ–¹ãŒè‰¯ã„æƒ…å ±æºãŒã‚ã£ãŸå ´åˆã¯ã”æŒ‡æ‘˜ã„ãŸã ã‘ã‚‹ã¨åŠ©ã‹ã‚Šã¾ã™ã€‚ @ikepyonã•ã‚“ã®ã”æŒ‡æ‘˜ã«ã‚ˆã‚Šã€ŒLASDEC ã‚¦ã‚§ãƒ–å¥åº·è¨ºæ–ã€ã‚’è¿½è¨˜ã—ãŸã€‚ ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ã®é–¢é€£ãƒªãƒ³ã‚¯ã«ã‚ˆã•ãã†ãªæƒ…å ±æºãŒã‚ã£ãŸã®ã§è¿½è¨˜ã—ã¾ã—ãŸã€‚ãã‚Œã‹ã‚‰ã€ã‚«ãƒ†ã‚´ãƒªã‚’ä½œã‚Šã¾ã—ãŸã€‚ â– Webã‚µã‚¤ãƒˆæ§‹ç¯‰ å®‰å…¨ãªã‚¦ã‚§ãƒ–ã‚µã‚¤ãƒˆã®ä½œã‚Šæ–¹ http://www.ipa.go.jp/security/vuln/websecurity.html å®‰å…¨ãªã‚¦ã‚§ãƒ–ã‚µã‚¤ãƒˆã®ä½œã‚Šæ–¹(å…¨92ãƒšãƒ¼ã‚¸ã€2.09MBï¼‰ ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å®Ÿè£… ãƒã‚§ãƒƒã‚¯ãƒªã‚¹ãƒˆï¼ˆExcelå½¢å¼ã€33KBï¼‰ å®‰å…¨ãªSQLã®å‘¼ã³å‡ºã—æ–¹ï¼ˆå…¨40ãƒšãƒ¼ã‚¸ã€714KBï¼‰ â– Webã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³é–‹ç™º ã‚»ã‚ãƒ¥ã‚¢ãƒ»ãƒ—ãƒã‚°ãƒ©ãƒŸãƒ³ã‚°è¬›åº§ http://www.ipa.go.jp/security/awareness/ve
bushimichi 2010/07/08
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

webåˆ¶ä½œ
ãƒªãƒ³ã‚¯
PHPã§äºˆã‚è¨±å¯ã—ãŸã‚¿ã‚°ã¨å±žæ€§ä»¥å¤–ã‚’é™¤åŽ»ã§ãã‚‹ãƒ©ã‚¤ãƒ–ãƒ©ãƒªã€Œksesã€:phpspoté–‹ç™ºæ—¥èªŒ
CSS3ã®ã§ã®ãƒœãƒƒã‚¯ã‚¹è¦ç´ ãƒ‡ã‚¶ã‚¤ãƒ³ã‚’åœ§å€’çš„ã«ç°¡å˜åŒ–ã§ãã‚‹ã€ŒCSS3 Click Chart... æ¬¡ã®è¨˜äº‹ â‰«ï¼šã‚¢ãƒ—ãƒªã‚„WEBã‚µã‚¤ãƒˆã«ä½¿ãˆãã†ãªãƒ•ãƒªãƒ¼ãª244å€‹ã®ã‚¢ã‚¤ã‚³ãƒ³ã‚»ãƒƒãƒˆ kses - PHP HTML/XHTML filter | Download kses - PHP HTML/XHTML filter software for free at SourceForge.net PHPã§äºˆã‚è¨±å¯ã—ãŸã‚¿ã‚°ã¨å±žæ€§ä»¥å¤–ã‚’é™¤åŽ»ã§ãã‚‹ãƒ©ã‚¤ãƒ–ãƒ©ãƒªã€Œksesã€ã€‚ å¤–éƒ¨ã‹ã‚‰ã®å…¥åŠ›å€¤ã¯åŸºæœ¬çš„ã«htmlspecialcharsã§ã‚¿ã‚°ã‚’ç„¡åŠ¹åŒ–ã™ã‚‹ã®ãŒé€šå¸¸ã®è€ƒãˆæ–¹ã§ã™ãŒã€æŽ²ç¤ºæ¿ãªã‚“ã‹ã§ç‰¹å®šã®ã‚¿ã‚°ã‚’è¨±å¯ã—ãŸã„ã¨ã„ã†å ´åˆãŒã‚ã‚Šã¾ã™ã€‚ PHPã«ã¯strip_tagsã¨ã„ã†ã‚ˆã†ãªã‚¿ã‚°ã‚’é™¤åŽ»ã—ã¤ã¤ã€ç‰¹å®šã®ã‚¿ã‚°ã®ã¿ã‚’æ®‹ã™ã¨ã„ã†é–¢æ•°ãŒæ¨™æº–ã§ã‚ã£ãŸã‚Šã—ã¾ã™ãŒã€ã“ã‚Œã ã¨å±žæ€§ã¾ã§ã¯åˆ¶å¾¡ã—ãã‚Œã¾ã›ã‚“ã€‚ æ›´ã«ã¯ã€<a href=
bushimichi 2010/06/28
ãƒ©ã‚¤ãƒ–ãƒ©ãƒª

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

PHP
ãƒªãƒ³ã‚¯
XSSã®æ”»æ’ƒæ‰‹æ³•ã„ã‚ã„ã‚ - ã†ãªã®æ—¥è¨˜
html5securityã®ã‚µã‚¤ãƒˆã«ã€XSSã®å„ç¨®æ”»æ’ƒæ‰‹æ³•ãŒã¾ã¨ã‚ã‚‰ã‚Œã¦ã„ã‚‹ã®ã‚’ç™ºè¦‹ã›ã‚Š!ã¨ã„ã†ã“ã¨ã§ã€å€‹äººçš„ã«ã€ŒãŠ!ã€ã¨æ€ã£ãŸæ”»æ’ƒã‚’ã‚µãƒ³ãƒ—ãƒ«ã¤ãã§ã”ç´¹ä»‹ã—ã¾ã™ã€‚ 1. CSS Expression IE7ä»¥å‰ã«ã¯ã€ŒCSS Expressionsã€ã¨ã„ã†æ‹¡å¼µæ©Ÿèƒ½ãŒã‚ã‚Šã€CSSå†…ã§JavaScriptã‚’å®Ÿè¡Œã§ããŸã‚Šã—ã¾ã™ã€‚ <div style="color:expression(alert('XSS'));">a</div> ç¢ºèª @IT -ï¼»æŸ”è»Ÿã™ãŽã‚‹ï¼½IEã®CSSè§£é‡ˆã§èµ·ã“ã‚‹XSS ã§è©³ã—ãè§£èª¬ã•ã‚Œã¦ã„ã¾ã™ãŒã€CSSã®è§£é‡ˆãŒæŸ”è»Ÿãªã“ã¨ã¨ã‚‚ã‚ã„ã¾ã£ã¦è‡ªå‰ã§ç„¡å®³åŒ–ã™ã‚‹ã®ã¯ãªã‹ãªã‹å›°é›£ã€‚ä»¥ä¸‹ã®ã‚ˆã†ãªã‚³ãƒ¼ãƒ‰ã§ã‚‚ã‚¹ã‚¯ãƒªãƒ—ãƒˆãŒå®Ÿè¡Œã•ã‚Œã¦ã—ã¾ã„ã¾ã™ã€‚ <div style="color:expr/* ã‚³ãƒ¡ãƒ³ãƒˆã®æŒ¿å…¥ */ession(alert('XSS'));">a</div> ç¢ºèª <div s
bushimichi 2010/06/20
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

ã¾ã¨ã‚
ãƒªãƒ³ã‚¯
Web ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã®è„†å¼±æ€§ã«å¯¾ã™ã‚‹æ”»æ’ƒã¨é˜²å¾¡ â€” Gruyere - 1.1
2010-06-13: Codelab ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã®åå‰ã‚’ Gruyere (æ—§ Jarlsberg) ã«å¤‰æ›´ã€‚ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ã‚’æ›´æ–°ã—ã¦ãã ã•ã„ã€‚ ãƒãƒƒã‚«ãƒ¼ã‚’æ‰“ã¡è² ã‹ã—ãŸã„ã§ã™ã‹ ?Â¶ ãƒãƒƒã‚«ãƒ¼ãŒã©ã®ã‚ˆã†ã«ã—ã¦ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã®è„†å¼±æ€§ã‚’è¦‹ã¤ã‘ã‚‹ã®ã‹ã‚’å¦ã¶ ! ãƒãƒƒã‚«ãƒ¼ãŒã©ã®ã‚ˆã†ã« Web ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã‚’æ”»æ’ƒã™ã‚‹ã®ã‹ã‚’å¦ã¶ ! ãã‚Œã‚’ã©ã®ã‚ˆã†ã«é˜²ãã‹ã‚’å¦ã¶ ! ã“ã® codelab ã§ã¯ã€ã©ã®ã‚ˆã†ã«ã—ã¦ Web ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã®è„†å¼±æ€§ãŒæ”»æ’ƒã•ã‚Œã‚‹ã‹ã€ ã¾ãŸãã®æ”»æ’ƒã‚’ã©ã®ã‚ˆã†ã«é˜²å¾¡ã™ã‚‹ã‹ã‚’è¦‹ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚ å¦ç¿’ã™ã‚‹ãŸã‚ã®æœ€å–„ã®é“ã¯å®Ÿéš›ã«ã‚„ã£ã¦ã¿ã‚‹ã“ã¨ã§ã‚ã‚Šã€ å®Ÿã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã«å¯¾ã—ã¦ä¾µå…¥ã‚’ãƒ†ã‚¹ãƒˆã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚ å…·ä½“çš„ã«ã¯ã€ä»¥ä¸‹ã®å†…å®¹ã‚’å¦ç¿’ã—ã¾ã™: ã©ã®ã‚ˆã†ã«ã—ã¦ã€ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã¸ã® ã‚¯ãƒã‚¹ã‚µã‚¤ãƒˆã‚¹ã‚¯ãƒªãƒ—ãƒ†ã‚£ãƒ³ã‚° (XSS) ã‚„ã‚¯ãƒã‚¹ã‚µã‚¤ãƒˆãƒªã‚¯ã‚¨ã‚¹ãƒˆãƒ•ã‚©ãƒ¼ã‚¸ã‚§ãƒªãƒ¼ (XSRF
bushimichi 2010/05/24
WEB

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
ãƒªãƒ³ã‚¯
Definitive PHP security checklist | sk89q
Iâ€™ve prepared a pretty comprehensive PHP security checklist thatâ€™s a good scan through. Update: This list was written in 2009 and now it is outdated, incomplete, and you can find more modern sources, such as OWASP. If you have any questions, feel free to leave a comment. The following is also now in a very concise printable form. Basic: Have strong passwords be sure that your â€œpassword recovery qu
bushimichi 2010/04/14
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

ã¾ã¨ã‚
ãƒªãƒ³ã‚¯
è‡ªåˆ†ã§ã§ãã‚‹Webã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³è„†å¼±æ€§è¨ºæ– - ãƒ‡ãƒ–ã‚µãƒŸ2010
2. ãƒ—ãƒãƒ•ã‚£ãƒ¼ãƒ«ä¸Šé‡Ž å®£ï¼ˆã†ãˆã®ãƒ»ã›ã‚“ï¼‰äº¬éƒ½å¸‚ç”Ÿã¾ã‚Œã€å¹¼å°‘æœŸã¯å®Ÿå®¶ãŒãƒ‘ã‚½ã‚³ãƒ³ã‚·ãƒ§ãƒƒãƒ—ã€é«˜å°‚ã§ãƒãƒœã‚³ãƒ³ã«ç†±ä¸ã—ã€è±Šæ©‹æŠ€ç§‘å¤§ã§ã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆã«ãƒãƒžã‚Šã€å¥ˆè‰¯å…ˆç«¯ç§‘å¦æŠ€è¡“å¤§å¦é™¢å¤§å¦ã«ã¦å±±å£è‹±æ•™æŽˆã®ä¸‹ã§æƒ…å ±ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚’å°‚æ”»ECé–‹ç™ºãƒ™ãƒ³ãƒãƒ£ãƒ¼ä¼æ¥ã§å‰µæ¥ãƒ¡ãƒ³ãƒãƒ¼ã€æ±è¨¼ãƒžã‚¶ãƒ¼ã‚ºä¸Šå ´ãªã©ã‚’çµŒé¨“ã‚’çµŒã¦ã€2006å¹´6æœˆã«æ ªå¼ä¼šç¤¾ãƒˆãƒ©ã‚¤ã‚³ãƒ¼ãƒ€ã‚’è¨ç«‹æ ªå¼ä¼šç¤¾ãƒˆãƒ©ã‚¤ã‚³ãƒ¼ãƒ€ ä»£è¡¨å–ç· å½¹æƒ…å ±ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£æ•™è‚²ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ã‚·ã‚¹ãƒ†ãƒ ï¼Webã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³è„†å¼±æ€§è¨ºæ–http://www.tricorder.jp/ ç‹¬ç«‹è¡Œæ”¿æ³•äººæƒ…å ±å‡¦ç†æŽ¨é€²æ©Ÿæ§‹(IPA)ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚»ãƒ³ã‚¿ãƒ¼ç ”ç©¶å“¡ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ï¼†ãƒ—ãƒã‚°ãƒ©ãƒŸãƒ³ã‚°ã‚ãƒ£ãƒ³ãƒ—è¬›å¸«æƒ…å ±ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å°‚é–€èªŒ ScanNet Securityç·¨é›†é•·CopyrightÂ©2010 Tricorder Co.Ltd. All rights reserved.2sen_u 3. è‘—æ›¸ã€é€£è¼‰ãªã©ä»Šå¤œã‚ã‹ã‚‹
bushimichi 2010/02/23
webã‚µãƒ¼ãƒ“ã‚¹

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
ãƒªãƒ³ã‚¯
PHPä»¥å¤–ã§ã¯: æ—¢ã«ã‚ãŸã‚Šå‰ã«ãªã‚Šã¤ã¤ã‚ã‚‹æ–‡å—ã‚¨ãƒ³ã‚³ãƒ¼ãƒ‡ã‚£ãƒ³ã‚°ãƒãƒªãƒ‡ãƒ¼ã‚·ãƒ§ãƒ³ - å¾³ä¸¸æµ©ã®æ—¥è¨˜(2009-09-14)
_æ—¢ã«ã‚ãŸã‚Šå‰ã«ãªã‚Šã¤ã¤ã‚ã‚‹æ–‡å—ã‚¨ãƒ³ã‚³ãƒ¼ãƒ‡ã‚£ãƒ³ã‚°ãƒãƒªãƒ‡ãƒ¼ã‚·ãƒ§ãƒ³ å¤§åž£é–ç”·ã•ã‚“ã®æ—¥è¨˜ã€Œä½•æ•…ã‹ã‚ãŸã‚Šå‰ã«ãªã‚‰ãªã„æ–‡å—ã‚¨ãƒ³ã‚³ãƒ¼ãƒ‡ã‚£ãƒ³ã‚°ãƒãƒªãƒ‡ãƒ¼ã‚·ãƒ§ãƒ³ã€ã«ç«¯ã‚’ç™ºã—ã¦ã€å…¥åŠ›ãƒ‡ãƒ¼ã‚¿ãªã©ã®æ–‡å—ã‚¨ãƒ³ã‚³ãƒ¼ãƒ‡ã‚£ãƒ³ã‚°ã®å¦¥å½“æ€§ãƒã‚§ãƒƒã‚¯ã‚’ã©ã†è¡Œã†ã‹ãŒè°è«–ã«ãªã£ã¦ã„ã¾ã™ã€‚ãƒã‚§ãƒƒã‚¯è‡ªä½“ãŒå¿…è¦ã§ã‚ã‚‹ã“ã¨ã¯çš†ã•ã‚“åŒæ„ã®ã‚ˆã†ã§ã™ãŒã€ ãƒã‚§ãƒƒã‚¯æ‹…å½“ã¯ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã‹ã€åŸºç›¤ã‚½ãƒ•ãƒˆï¼ˆè¨€èªžã€ãƒ•ãƒ¬ãƒ¼ãƒ ãƒ¯ãƒ¼ã‚¯ãªã©ï¼‰ã‹ å…¥åŠ›ãƒ»å‡¦ç†ãƒ»å‡ºåŠ›ã®ã©ã“ã§ãƒã‚§ãƒƒã‚¯ã™ã‚‹ã®ã‹ ã¨ã„ã†ç‚¹ã§ã€ã•ã¾ã–ã¾ãªæ„è¦‹ãŒå¯„ã›ã‚‰ã‚Œã¦ã„ã¾ã™ã€‚å¤§åž£ã•ã‚“è‡ªèº«ã¯ã€ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ãŒå…¥åŠ›æ™‚ç‚¹ã§ãƒã‚§ãƒƒã‚¯ã™ã¹ãã¨ä¸»å¼µã•ã‚Œã¦ã„ã¾ã™ã€‚ã“ã‚Œã«å¯¾ã—ã¦ã€ã„ã‚„åŸºç›¤ã‚½ãƒ•ãƒˆã§ãƒã‚§ãƒƒã‚¯ã™ã¹ãã ã¨ã‹ã€æ–‡å—åˆ—ã‚’ã€Œä½¿ã†ã¨ãã€ã«ãƒã‚§ãƒƒã‚¯ã™ã¹ãã ã¨ã„ã†æ„è¦‹ãŒå‡ºã¦ã„ã¾ã™ã€‚ ãŸã¨ãˆã°ã€id:ikepyonã®æ—¥è¨˜ã€Œ[ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£]ä½•æ•…ã‹ã‚ãŸã‚Šå‰ã«ãªã‚‰ãªã„æ–‡å—ã‚¨ãƒ³ã‚³ãƒ¼ãƒ‡ã‚£ãƒ³ã‚°ãƒãƒªãƒ‡ãƒ¼ã‚·ãƒ§ãƒ³ã€ã§ã¯ã€ã“ã®ãƒã‚§ãƒƒã‚¯ã¯åŸºç›¤ã‚½ãƒ•
bushimichi 2009/09/14
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

æ–‡å—ã‚³ãƒ¼ãƒ‰
ãƒªãƒ³ã‚¯
PHPã®è¨å®šã‚’ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã®è¦³ç‚¹ã‹ã‚‰æ”¹å–„Â·PHP Security Consortium MOONGIFT
PHPã¯åºƒãæ•°å¤šã®Webã‚µãƒ¼ãƒã§ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã•ã‚Œã€ä½¿ã‚ã‚Œã¦ã„ã‚‹ã€‚è¨å®šãƒ•ã‚¡ã‚¤ãƒ«ã¯æ®†ã©ãã®ã¾ã¾ã§ä½¿ã‚ã‚Œã¦ã„ã‚‹ã“ã¨ãŒå¤šã„ã®ã§ã¯ãªã„ã ã‚ã†ã‹ã€‚ã ãŒ4.2ã‚ˆã‚Šå‰ã®ãƒãƒ¼ã‚¸ãƒ§ãƒ³ã§ã¯register_globalsã®ãƒ‡ãƒ•ã‚©ãƒ«ãƒˆãŒOnã«ãªã£ã¦ã„ãŸãªã©ã€åˆ©ä¾¿æ€§ã¨ã‚»ã‚ãƒ¥ã‚¢ã§ã‚ã‚‹ã“ã¨ã¨ã®é–¢ä¿‚ã§æ½œåœ¨çš„ãªå•é¡Œã¯ã‚ã‚‹ã‹ã‚‚çŸ¥ã‚Œãªã„ã€‚ php.iniã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒã‚§ãƒƒã‚¯ã« è¦‹ç›´ã™ã®ã¯PHPã®è¨å®šãƒ•ã‚¡ã‚¤ãƒ«ã§ã‚ã‚‹php.iniã ãŒã€å¤šæ•°ã®è¨å®šãŒã‚ã‚‹ã®ã§ã±ã£ã¨è¦‹ã§ã¯è¨å®šã®å–„ã—æ‚ªã—ãŒåˆ†ã‹ã‚Šã¥ã‚‰ã„ã‹ã‚‚çŸ¥ã‚Œãªã„ã€‚ãã“ã§ä½¿ã†ã®ãŒPHP Security Consortiumã ã€‚ ä»Šå›žç´¹ä»‹ã™ã‚‹ã‚ªãƒ¼ãƒ—ãƒ³ã‚½ãƒ¼ã‚¹ãƒ»ã‚½ãƒ•ãƒˆã‚¦ã‚§ã‚¢ã¯PHP Security Consortiumã€PHPã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£è¨å®šã‚’è¦‹ç›´ã™ã‚½ãƒ•ãƒˆã‚¦ã‚§ã‚¢ã ã€‚ PHP Security Consortiumã¯PHPã§ä½œã‚‰ã‚ŒãŸã‚½ãƒ•ãƒˆã‚¦ã‚§ã‚¢ã§ã€phpinfo()ã‹ã‚‰å¾—ã‚‰ã‚Œã‚‹æƒ…å ±ã‚’ä½¿ã£
bushimichi 2009/08/24
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

php
ãƒªãƒ³ã‚¯
RSAã®å…¬é–‹éµæš—å·æ–¹å¼ã§ãƒ•ã‚©ãƒ¼ãƒ ã®ãƒ‡ãƒ¼ã‚¿ã®æš—å·ãŒè¡Œãˆã‚‹jQueryãƒ—ãƒ©ã‚°ã‚¤ãƒ³ã€ŒjCryptionã€:phpspoté–‹ç™ºæ—¥èªŒ
RSAã®å…¬é–‹éµæš—å·æ–¹å¼ã§ãƒ•ã‚©ãƒ¼ãƒ ã®ãƒ‡ãƒ¼ã‚¿ã®æš—å·ãŒè¡Œãˆã‚‹jQueryãƒ—ãƒ©ã‚°ã‚¤ãƒ³ã€ŒjCryptionã€ 2009å¹´08æœˆ10æ—¥- jCryption - JavaScript data encryption RSAã®å…¬é–‹éµæš—å·æ–¹å¼ã§ãƒ•ã‚©ãƒ¼ãƒ ã®ãƒ‡ãƒ¼ã‚¿ã®æš—å·ãŒè¡Œãˆã‚‹jQueryãƒ—ãƒ©ã‚°ã‚¤ãƒ³ã€ŒjCryptionã€ã€‚ 2048bit ã®RSAã§æš—å·å¯èƒ½ã€‚Ajaxã§ã®ã‚µãƒ–ãƒŸãƒƒãƒˆã‚‚ã‚µãƒãƒ¼ãƒˆã€‚ æš—å·åŒ–ã¯æ—¢ã«ã—ã¦ã‚ã‚Šã€SSLã‚‚ä¸è¦ã€‚ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ç°¡å˜ã¨ã„ã†ç‰¹å¾´ãŒã‚ã‚Šã¾ã™ã€‚ ã¡ã‚ƒã‚“ã¨ã—ãŸãƒ—ãƒãƒ€ã‚¯ãƒˆã«çµ„ã¿è¾¼ã‚€éš›ã¯ã€ãã¡ã‚“ã¨ã—ãŸæ¤œè¨¼ãŒå¿…è¦ã ã¨æ€ã„ã¾ã™ãŒã€é¢ç™½ã„ä»•çµ„ã¿ã§ã™ãã€‚ ãƒ‡ãƒ¢ãƒšãƒ¼ã‚¸ã§å„ç¨®ãƒ‡ãƒ¢ãŒè¦‹ã‚Œã¾ã™ã€‚ ãƒ‡ãƒ¼ã‚¿ã‚’é€ä¿¡ã™ã‚‹ã¨ã€ä»¥ä¸‹ã®ã‚ˆã†ã« jCryption ã‚’ã‚ãƒ¼ã¨ã—ã¦æš—å·åŒ–ãŒè¡Œã‚ã‚Œã¦ã„ã‚‹ã“ã¨ãŒã‚ã‹ã‚Šã¾ã™ã€‚ decrypted POST ã§å…ƒãƒ‡ãƒ¼ã‚¿ãŒå–ã‚Œã¦ã„ã¾ã™ãã€‚ ã“ã‚Œã¯ã™ã”ã„ã§ã™ã€‚
bushimichi 2009/08/10
RSA

jQuery

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
ãƒªãƒ³ã‚¯
Walk ON!: PHP security settings
Mar 11, 2007 PHP security settings Sometimes there is a need to set up a 3rd party script, like a forum, on the dedicated server I am responsible for. Maybe you rem ember, a couple years ago a serious security issue was discovered in PHPBB, a very popular forum software at that time, and hundreds of thousands of servers all over the world got infected by a worm. I do rem ember that case. So there is
bushimichi 2009/07/28
php

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
ãƒªãƒ³ã‚¯
ssh scp sftp ã®æ£ã—ã„è‡ªå‹•å®Ÿè¡Œæ–¹æ³•
Landscape ãƒˆãƒƒãƒ—ãƒšãƒ¼ã‚¸ | < å‰ã®æ—¥ 2004-11-15 2004-11-17 æ¬¡ã®æ—¥ 2004-11-18 > Landscape - ã‚¨ãƒ³ã‚¸ãƒ‹ã‚¢ã®ãƒ¡ãƒ¢Â 2004-11-17 ssh scp sftp ã®æ£ã—ã„è‡ªå‹•å®Ÿè¡Œæ–¹æ³• å½“ã‚µã‚¤ãƒˆå†…ã‚’ Google æ¤œç´¢ã§ãã¾ã™ * ssh scp sftp ã®æ£ã—ã„è‡ªå‹•å®Ÿè¡Œæ–¹æ³•ã“ã®è¨˜äº‹ã®ç›´ãƒªãƒ³ã‚¯URL: Permlink | ã“ã®è¨˜äº‹ãŒå±žã™ã‚‹ã‚«ãƒ†ã‚´ãƒª: [ssh] [ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£] scp ã¨ sftp ã«ã¤ã„ã¦èª¿ã¹ã¦ã„ã‚‹ã¨ã€æ£ã—ã„è‡ªå‹•å®Ÿè¡Œã«ã¤ã„ã¦ã®æ–‡æ›¸ã‚’è¦‹ã¤ã‘ãŸã€‚cron ã‹ã‚‰ scp ã‚„ sftp ã‚’è‡ªå‹•å®Ÿè¡Œã—ã‚ˆã†ã¨è€ƒãˆã¦ã„ã‚‹ç§ã«ã¯å½¹ã«ç«‹ã¤æ–‡æ›¸ã ã€‚ - ã€Œå°‚ç”¨ã®ãƒ‘ã‚¹ãƒ•ãƒ¬ãƒ¼ã‚ºãªã—ã®éµã‚’ä½œã£ã¦æ¨©é™é™å®šã€ãŒãƒ™ã‚¹ãƒˆæ£ã—ã„ssh/scpã®è‡ªå‹•é‹è»¢ã¯ ã´ã‚æ—¥è¨˜ http://www.banana-fish.com/~piro/20040609.
bushimichi 2009/07/17
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

Linux

SSH
ãƒªãƒ³ã‚¯
Kozupon.com - Postfixã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ‘ãƒ©ãƒ¡ãƒ¼ã‚¿
ã¯ã£ãã‚Šè¨€ã£ã¦ã€ç§ã®çµŒé¨“ã‹ã‚‰â€ä¸æ£ä¸ç¶™ã®è©¦ã¿â€ã‚’ã‚„ã‚‰ã‹ã™å¥´ã‚‰ãŒéžå¸¸ã«å¤šã„ï¼ï¼ï¼ï¼ˆçˆ†çˆ†ï¼‰ ãã‚Œã‚‚ã€ä»–ã®ã‚µãƒ¼ãƒã‚’è¸ã¿å°ã«ã—ã¦Helloãƒ‘ã‚±ãƒƒãƒˆã¨ã‹ã‚’é€ã‚‹â€ãµã¨ã©ãè€…ï¼â€ãŒãƒ»ãƒ»ãƒ»ãƒ»ï¼ï¼ˆçˆ†ï¼‰ å¤šåˆ†ã€è‡ªå‰ã‚µãƒ¼ãƒã‚’æ§‹ç¯‰ã—ã¦é‹ç”¨ã—ã¦ã‚‹æ–¹ã€…ã¯çµŒé¨“æ¸ˆã¿ã‹ã¨æ€ã†ã€‚ã¨ã“ã‚ã§Postfixã¯ã€çµæ§‹ç°¡å˜ãªè¨å®šãŒå£²ã‚Šã®MTAã§ã‚ã‚‹ã€‚ã—ãŸãŒã£ã¦ã€ç°¡å˜ãªè¨å®šã ã‘ã§ã‚‚ã‹ãªã‚Šå …ã„å£ãŒä½œã‚Œã‚‹ã€‚ã—ã‹ã—ã€ã•ã‚‰ã«ã‚·ãƒ“ã‚¢ã«ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£è¨å®šã‚’è¡Œã†ã¨å¥¥ãŒæ·±ã„ã€‚ã‚ãˆã¦ã€ã“ã“ã§ã¯Postfixã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ‘ãƒ©ãƒ¡ãƒ¼ã‚¿ï¼ã¨å‘½åã—ãŸã€‚ä¸æ£ä¸ç¶™ã«é–¢ã—ã¦ã¯Postfixã®è¨å®šãƒ•ã‚¡ã‚¤ãƒ«main.cfã®mynetworksã¨relay_domainsã§è¨å®šã§ãã¡ã‚ƒã†ã€‚ ã“ã“ã€€ã§ã™ã§ã«Postfixã®å°Žå…¥è¨å®šã¯å®Œçµã—ã¦ã„ã‚‹ã€‚ãªã«ã’ã«ã€Postfixã¯ã•ã‚‰ã«ç´°ã‹ã„ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£è¨å®šãŒå‡ºæ¥ã‚‹ã‚ˆã†ã«è€ƒæ…®ã•ã‚Œã¦ã„ã‚‹ã€‚ã“ã“ã§ã¯ã€ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£è¨å®šã‚’ä¸å¿ƒã«main.
bushimichi 2009/07/14
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

Postfix
ãƒªãƒ³ã‚¯
Â» ã‚»ã‚ãƒ¥ã‚¢ãªã‚µãƒ¼ãƒã‚’ä½œã‚‹ãŸã‚ã«æœ€ä½Žé™ã‚„ã£ã¦ãŠãã“ã¨: ã‚¨ã‚¹ã‚ãƒ¥ãƒ¼ãƒ“ã‚ºãƒ ãƒ©ãƒœ Blog
Recent Entries ã‚»ã‚ãƒ¥ã‚¢ãªã‚µãƒ¼ãƒã‚’ä½œã‚‹ãŸã‚ã«æœ€ä½Žé™ã‚„ã£ã¦ãŠãã“ã¨ Yahooã‚ãƒ¼ãƒ¯ãƒ¼ãƒ‰æŠ½å‡ºAPIãƒ©ã‚¤ãƒ–ãƒ©ãƒª ãƒ†ã‚¹ãƒˆé§†å‹•é–‹ç™º ï¼ˆtest driven development: TDDï¼‰ ã®ã™ã™ã‚ GoogleAnalyticsAPI on EC-CUBE åœŸæ—¥ã§ä½œã‚‹ã‚³ãƒ³ãƒ‘ã‚¤ãƒ© OPEN ERPã«æŒ‘æˆ¦ï¼“ OPEN ERPã«æŒ‘æˆ¦ï¼’ OPEN ERPã«æŒ‘æˆ¦ ERPã¯ãŸãã•ã‚“ã‚ã‚Œã©ãƒ»ãƒ»ãƒ» OpenGLã§3Dã€ã‚„ã£ã¦ã¿ã‚ˆã† Recent Comments No Responses. Recent Trackbacks ãƒ†ã‚¹ãƒˆé§†å‹•é–‹ç™º ï¼ˆtest driven development: TDDï¼‰ ã®ã™ã™ã‚ 06/11 Â» Yahooã‚ãƒ¼ãƒ¯ãƒ¼ãƒ‰æŠ½å‡º... ã¿ãªã•ã‚“ã¯ã‚µãƒ¼ãƒã‚’ç®¡ç†ã™ã‚‹ã¨ãã«ã€ä½•ã‚’ä¸€ç•ªæ°—ã«ã—ã¾ã™ã‹ï¼Ÿ äººã«ã‚ˆã£ã¦ç¨‹åº¦ã®å·®ã¯ã‚ã‚‹ã®ã§ã—ã‚‡ã†ãŒã€èª°ã‚‚ãŒæ°—ã«ãªã‚‹ã®ãŒã€Œã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã€ã§ã—ã‚‡
bushimichi 2009/06/20
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

ã‚µãƒ¼ãƒ
ãƒªãƒ³ã‚¯
C-Production â€“ UNIXã¨ãƒ—ãƒã‚°ãƒ©ãƒŸãƒ³ã‚°ã®å‚™å¿˜éŒ²
å¤§å¤‰ã”ç„¡æ²™æ±°ã§ã™ã€‚ç´„1å¹´åŠã¶ã‚Šã®æ›´æ–°ã§ã™ã€‚ æ˜¨æ—¥ã€ãƒ–ãƒã‚°ã‚’è¨ç½®ã—ã¦ã„ã‚‹ã‚µãƒ¼ãƒã§OSã®ã‚¢ãƒƒãƒ—ãƒ‡ãƒ¼ãƒˆã«å•é¡ŒãŒç™ºç”Ÿã—ãŸãŸã‚ã€ã“ã‚Œã‚’æ©Ÿã«æ–°ã‚µãƒ¼ãƒãƒ»æ–°OSã«ä¹—ã‚Šæ›ãˆã‚‹ã“ã¨ã«ã—ã¾ã—ãŸã€‚ ç¾åœ¨ã®ãƒ–ãƒã‚°ãŒãƒžãƒ«ãƒã‚µã‚¤ãƒˆã®ãŸã‚ã€ãã®ã¾ã¾ã§ã¯æ–°ã‚µãƒ¼ãƒã®æ§‹ç¯‰ã«è‹¦æˆ¦ã™ã‚‹ã¨äºˆæƒ³ã•ã‚Œã‚‹ãŸã‚ã€ä»–ã®ãƒ–ãƒã‚°ã®è¨˜äº‹ã‚’çµ±åˆã—ã¾ã—ãŸã€‚ çµ±åˆå†…å®¹ã¯ä»¥ä¸‹ã®é€šã‚Šã§ã™ã€‚ ãƒ»C-Production ãƒ»ãƒ»ãƒ» ãƒ¡ã‚¤ãƒ³ã‚µã‚¤ãƒˆã®ãŸã‚ã€ä»–ã®ãƒ–ãƒã‚°ã‚’å¸åŽã—ã¦ç¶™ç¶šã€‚ ãƒ»â™ª8thNoteâ™ª ãƒ»ãƒ»ãƒ» ãƒ¡ã‚¤ãƒ³ã‚µã‚¤ãƒˆã«çµ±åˆæ¸ˆã¿ã ã£ãŸã®ã§ã€å‰Šé™¤ã€‚ ãƒ»ãƒ¢ãƒã‚¤ãƒ«é‚ ãƒ»ãƒ»ãƒ» ãƒ¡ã‚¤ãƒ³ã‚µã‚¤ãƒˆã«è¨˜äº‹ã‚’å¼•ãç¶™ãŽã€ä¸¦è¡Œç¨¼åƒä¸ã€‚ ãƒ»ç„¡ç·šã®ãƒ‰ã‚ãƒ¥ãƒ¡ãƒ³ãƒˆ ãƒ»ãƒ»ãƒ» ã‚‚ã¨ã‚‚ã¨é–‰éŽ–äºˆå®šã ã£ãŸã®ã§ã€ãã®ã¾ã¾å‰Šé™¤ å¤–éƒ¨SNSã®ã‚¢ã‚«ã‚¦ãƒ³ãƒˆã«ã¤ã„ã¦ã¯ãã®ã¾ã¾ç¶™ç¶šã—ã¾ã™ã€‚ ä»Šå¾Œã¨ã‚‚ã‚ˆã‚ã—ããŠé¡˜ã„ã—ã¾ã™ã€‚
bushimichi 2009/05/04
mobile

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
ãƒªãƒ³ã‚¯
ç¬¬1å›žã€€UTF-7ã«ã‚ˆã‚‹ã‚¯ãƒã‚¹ã‚µã‚¤ãƒˆã‚¹ã‚¯ãƒªãƒ—ãƒ†ã‚£ãƒ³ã‚°æ”»æ’ƒï¼»å‰ç·¨ï¼½ | gihyo.jp
ã¿ãªã•ã‚“ã€ã¯ã˜ã‚ã¾ã—ã¦ã€‚ã¯ã›ãŒã‚ã‚ˆã†ã™ã‘ã¨ç”³ã—ã¾ã™ã€‚ æœ€è¿‘ã€æ–‡å—ã‚³ãƒ¼ãƒ‰ã¨é–¢é€£ã—ãŸã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã®è©±é¡Œã‚’ç›®ã«ã™ã‚‹ã“ã¨ãŒå¢—ãˆã¦ãã¾ã—ãŸã€‚æ–‡å—ã‚³ãƒ¼ãƒ‰ã‚’åˆ©ç”¨ã—ãŸæ”»æ’ƒã¯æŠ€è¡“çš„ã«æœªé–‹æ‹“ã¨ã„ã†ã“ã¨ã‚‚ã‚ã‚Šã€å‚è€ƒã¨ãªã‚‹æƒ…å ±ãŒãªã‹ãªã‹è¦‹å½“ãŸã‚Šã¾ã›ã‚“ã€‚ã“ã®é€£è¼‰ã§ã¯ã€æ–‡å—ã‚³ãƒ¼ãƒ‰ã‚’åˆ©ç”¨ã—ãŸæ”»æ’ƒã‚„ãã‚Œã«å¯¾ã™ã‚‹å¯¾ç–ã«ã¤ã„ã¦æ£ã—ã„çŸ¥è˜ã‚’è§£èª¬ã—ã¦ã„ãã¾ã™ã€‚ æ–‡å—ã‚³ãƒ¼ãƒ‰ã¨ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãŒé–¢é€£ã™ã‚‹ã‚‚ã£ã¨ã‚‚å¤§ããªç‚¹ã¯ã€ã‚„ã¯ã‚Šæ–‡å—åˆ—ã®æ¯”è¼ƒã§ã—ã‚‡ã†ã€‚ã€Œâ å±é™ºãªæ–‡å—åˆ—ã®æ¤œå‡ºã€ã€Œâ å®‰å…¨ãªæ–‡å—åˆ—ã§ã‚ã‚‹ã“ã¨ã®ç¢ºèªã€ã¨ã„ã£ãŸæ–‡å—åˆ—ã®æ¯”è¼ƒã¯ã€ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚’è€ƒãˆã‚‹ã†ãˆã§é¿ã‘ã¦é€šã‚Œãªã„å‡¦ç†ã ã¨æ€ã„ã¾ã™ã€‚ æ–‡å—åˆ—ã®æ¯”è¼ƒã«ãŠã„ã¦ã¯ã€å˜ç´”ã«ãƒã‚¤ãƒˆåˆ—ã‚’æ¯”è¼ƒã™ã‚‹ã ã‘ã§ã¯ä¸ååˆ†ã§ã€æ–‡å—åˆ—ãŒãƒ¡ãƒ¢ãƒªä¸Šã§ã©ã®ã‚ˆã†ãªãƒã‚¤ãƒˆåˆ—ã¨ã—ã¦æ ¼ç´ã•ã‚Œã¦ã„ã‚‹ã®ã‹ï¼ˆã“ã®ãƒ«ãƒ¼ãƒ«ã‚’ç¬¦å·åŒ–æ–¹å¼ã‚ã‚‹ã„ã¯æ–‡å—ã‚¨ãƒ³ã‚³ãƒ¼ãƒ‡ã‚£ãƒ³ã‚°ã¨è¨€ã„ã¾ã™ï¼‰ã«æ³¨æ„ã—ãªã‘ã‚Œã°ãªã‚‰ãªã„ã“ã¨ã‚‚ã‚ã‚‹ã§ã—ã‚‡ã†ã€‚æ”»æ’ƒè€…ã¯å·§ã¿ã«æ–‡å—
bushimichi 2009/03/21
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

UTF-7
ãƒªãƒ³ã‚¯
PHP ã¨ Web ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã«ã¤ã„ã¦ã®ãƒ¡ãƒ¢
ã“ã®ãƒšãƒ¼ã‚¸ã«ã¤ã„ã¦ã®èª¬æ˜Žãƒ»æ³¨æ„ãªã© PHP ã¯ã€Apache ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã‚„ã€CGIã€ã‚³ãƒžãƒ³ãƒ‰ãƒ©ã‚¤ãƒ³ã¨ã—ã¦ä½¿ç”¨ã§ãã‚‹ã‚¹ã‚¯ãƒªãƒ—ãƒˆè¨€èªžã§ã™ã€‚ã“ã®ãƒšãƒ¼ã‚¸ã§ã¯ã€ä¸»ã« PHP ã«ãŠã‘ã‚‹ã€Web ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å•é¡Œã«ã¤ã„ã¦ã¾ã¨ã‚ã¦ã„ã¾ã™ã€‚ Web ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å•é¡Œã¨ã—ã¦ã¯ã€ä»¥ä¸‹ã®å•é¡Œã«ã¤ã„ã¦ã‚ˆãå–ã‚ŠæŒ™ã’ã‚‰ã‚Œã¦ã„ã‚‹ã¨æ€ã„ã¾ã™ãŒã€ã“ã‚Œã‚‰ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å•é¡Œã«ã¤ã„ã¦èª¿ã¹ãŸã“ã¨ã‚„ã€ã“ã‚Œã‚‰ä»¥å¤–ã§ã‚‚ã€PHP ã«é–¢é€£ã—ã¦ã„ã‚‹ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å•é¡Œã«ã¤ã„ã¦çŸ¥ã£ã¦ã„ã‚‹ã“ã¨ã«ã¤ã„ã¦ãƒ¡ãƒ¢ã—ã¦ãŠãã¾ã™ã€‚ ã‚¯ãƒã‚¹ã‚µã‚¤ãƒˆã‚¹ã‚¯ãƒªãƒ—ãƒ†ã‚£ãƒ³ã‚° SQL ã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³ ãƒ‘ã‚¹ãƒ»ãƒˆãƒ©ãƒãƒ¼ã‚µãƒ«(ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªãƒ»ãƒˆãƒ©ãƒãƒ¼ã‚µãƒ«) ã‚»ãƒƒã‚·ãƒ§ãƒ³ãƒã‚¤ã‚¸ãƒ£ãƒƒã‚¯ ã‚³ãƒžãƒ³ãƒ‰ã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³ ã¾ãŸã€PHP ãƒžãƒ‹ãƒ¥ã‚¢ãƒ« : ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚„ã€PHP Security Guide (PHP Security Consortium) ã«ã¯ã€PH
bushimichi 2009/03/13
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

php
ãƒªãƒ³ã‚¯
1 2 æ¬¡ã®ãƒšãƒ¼ã‚¸