[B! security][web] hamacoã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

hamaco id:hamaco

securityã¨webã«é–¢ã™ã‚‹hamacoã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (5)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

ãƒã‚°ã‚¢ã‚¦ãƒˆæ©Ÿèƒ½ã®ç›®çš„ã¨å®Ÿç¾æ–¹æ³•
ã“ã®ã‚¨ãƒ³ãƒˆãƒªã§ã¯ã€Webã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã«ãŠã‘ã‚‹ãƒã‚°ã‚¢ã‚¦ãƒˆæ©Ÿèƒ½ã«é–¢é€£ã—ã¦ã€ãã®ç›®çš„ã¨å®Ÿç¾æ–¹æ³•ã«ã¤ã„ã¦èª¬æ˜Žã—ã¾ã™ã€‚ è°è«–ã®å‰æ ã“ã®ã‚¨ãƒ³ãƒˆãƒªã§ã¯ã€èªè¨¼æ–¹å¼ã¨ã—ã¦ã€ã„ã‚ã‚†ã‚‹ãƒ•ã‚©ãƒ¼ãƒ èªè¨¼ã‚’å‰æã¨ã—ã¦ã„ã¾ã™ã€‚ãƒ•ã‚©ãƒ¼ãƒ èªè¨¼ã¯ä¿—ãªè¨€ã„æ–¹ã‹ã‚‚ã—ã‚Œã¾ã›ã‚“ãŒã€HTMLãƒ•ã‚©ãƒ¼ãƒ ã§IDã¨ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã®å…¥åŠ›ãƒ•ã‚©ãƒ¼ãƒ ã‚’ä½œæˆã—ã€ãã®å…¥åŠ›å€¤ã‚’ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³å´ã§æ¤œè¨¼ã™ã‚‹èªè¨¼æ–¹å¼ã®ã“ã¨ã§ã™ã€‚IDã¨ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã®å…¥åŠ›ã¯æœ€åˆã®1å›žã§ã™ã¾ã›ãŸã„ãŸã‚ã€é€šå¸¸ã¯Cookieã‚’ç”¨ã„ã¦èªè¨¼çŠ¶æ…‹ã‚’ä¿æŒã—ã¾ã™ã€‚ãƒã‚°ã‚¢ã‚¦ãƒˆæ©Ÿèƒ½ã¨ã¯ã€ä¿æŒã•ã‚ŒãŸèªè¨¼çŠ¶æ…‹ã‚’ç ´æ£„ã—ã¦ã€èªè¨¼ã—ã¦ã„ãªã„çŠ¶æ…‹ã«æˆ»ã™ã“ã¨ã§ã™ã€‚ Cookieã‚’ç”¨ã„ãŸèªè¨¼çŠ¶æ…‹ä¿æŒ å‰è¿°ã®ã‚ˆã†ã«ã€èªè¨¼çŠ¶æ…‹ã®ä¿æŒã«ã¯Cookieã‚’ç”¨ã„ã‚‹ã“ã¨ãŒä¸€èˆ¬çš„ã§ã™ãŒã€Cookieã« auth=1 ã¨ã‹ã€userid=tokumaru ãªã©ã®ã‚ˆã†ã«ã€ãƒã‚°ã‚¤ãƒ³çŠ¶æ…‹ã‚’ã€Œãã®ã¾ã¾ã€Cookieã«ä¿æŒã™ã‚‹ã¨è„†å¼±æ€§ã«ãªã‚Šã¾ã™
hamaco 2013/02/15
web

cookie

security
ãƒªãƒ³ã‚¯
ã‚‚ã—ã€Žã‚ˆãã‚ã‹ã‚‹PHPã®æ•™ç§‘æ›¸ã€ã®è‘—è€…ãŒå¾³ä¸¸æµ©ã®ã€Žå®‰å…¨ãªWebã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã®ä½œã‚Šæ–¹ã€ã‚’èªã‚“ã ã‚‰ - ockeghem's blog
ãŸã«ãã¡ã¾ã“ã¨ã•ã‚“ã®æ›¸ã‹ã‚ŒãŸã€Žã‚ˆãã‚ã‹ã‚‹PHPã®æ•™ç§‘æ›¸ï¼ˆä»¥ä¸‹ã€ã€Œã‚ˆãã‚ã‹ã‚‹ã€ï¼‰ã€ã‚’è³¼å…¥ã—ã¦ãƒ‘ãƒ©ãƒ‘ãƒ©ã¨è¦‹ã¦ã„ãŸã‚‰ã€ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ä¸Šã®å•é¡ŒãŒã‹ãªã‚Šã‚ã‚‹ã“ã¨ã«æ°—ãŒã¤ãã¾ã—ãŸã€‚ãã“ã§ã€æ‹™è‘—ã€Œä½“ç³»çš„ã«å¦ã¶ å®‰å…¨ãªWebã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã®ä½œã‚Šæ–¹ï¼ˆä»¥ä¸‹ã€å¾³ä¸¸æœ¬ï¼‰ã€ã®ç« ãƒ»ç¯€æ¯Žã«ç…§ã‚‰ã—åˆã‚ã›ã¦ã€ã€Œã‚ˆãã‚ã‹ã‚‹ã€ã®è„†å¼±æ€§ã«ã¤ã„ã¦å ±å‘Šã—ã¾ã™ã€‚ä¸»ã«ã€å¾³ä¸¸æœ¬ã®4ç« ã¨5ç« ã‚’å‚ç…§ã—ã¾ã™ã€‚ 4.2 å…¥åŠ›å‡¦ç†ã¨ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ ã€Œã‚ˆãã‚ã‹ã‚‹ã€ã®ã‚µãƒ³ãƒ—ãƒ«ã‚„è§£èª¬ã§ã¯ã€å…¥åŠ›å€¤æ¤œè¨¼ã¯ã»ã¨ã‚“ã©ã—ã¦ã„ã¾ã›ã‚“ã€‚ã—ã‹ã—ã€å…¥åŠ›å€¤æ¤œè¨¼ã‚’ã—ã¦ã„ãªã„ã‹ã‚‰ã¨ã„ã£ã¦å³è„†å¼±ã‹ã¨ã„ã†ã¨ãã†ã§ã¯ã‚ã‚Šã¾ã›ã‚“ã€‚å¾³ä¸¸æœ¬ã§ã‚‚å¼·èª¿ã—ã¦ã„ã‚‹ã‚ˆã†ã«ã€å…¥åŠ›å€¤æ¤œè¨¼ã¯ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³è¦ä»¶ï¼ˆä»•æ§˜ï¼‰ã«æ²¿ã£ã¦ã„ã‚‹ã“ã¨ã‚’ç¢ºèªã™ã‚‹ã‚‚ã®ã§ã€ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å¯¾ç–ãŒç›®çš„ã§ã¯ãªã„ã‹ã‚‰ã§ã™ã€‚ ã€Œã‚ˆãã‚ã‹ã‚‹ã€ã®ä¸ã§ã€ç§ãŒè¦‹ãŸç¯„å›²ã§å”¯ä¸€ã®å…¥åŠ›å€¤æ¤œè¨¼ã¯ã€éƒµä¾¿ç•ªå·ã®ãƒã‚§ãƒƒã‚¯ã‚’ã™ã‚‹ã‚‚ã®ã§ã™ã€‚ä»¥ä¸‹ã«å¼•ç”¨ã—ã¾ã™ï¼ˆã€Œã‚ˆãã‚
hamaco 2011/08/23
web

Security
ãƒªãƒ³ã‚¯
ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã®çµ‚äº†æ—¥ã‚’2020å¹´1æœˆ31æ—¥(é‡‘)ã«æ±ºå®šã—ã¾ã—ãŸ - ã¯ã¦ãªã®å‘ŠçŸ¥
ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã®çµ‚äº†æ—¥ã‚’2020å¹´1æœˆ31æ—¥(é‡‘)ã«æ±ºå®šã—ã¾ã—ãŸ ä»¥ä¸‹ã®ã‚¨ãƒ³ãƒˆãƒªã®é€šã‚Šã€ä»Šå¹´æœ«ã‚’ç›®å‡¦ã«ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã‚’çµ‚äº†äºˆå®šã§ã‚ã‚‹æ—¨ã‚’ãŠçŸ¥ã‚‰ã›ã—ã¦ãŠã‚Šã¾ã—ãŸã€‚ 2019å¹´æœ«ã‚’ç›®å‡¦ã«ã€ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã®æä¾›ã‚’çµ‚äº†ã™ã‚‹äºˆå®šã§ã™ - ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—æ—¥è¨˜ ã“ã®ãŸã³ã€æ£å¼ã«çµ‚äº†æ—¥ã‚’æ±ºå®šã„ãŸã—ã¾ã—ãŸã®ã§ã€ä»¥ä¸‹ã®é€šã‚Šã”ç¢ºèªãã ã•ã„ã€‚ çµ‚äº†æ—¥: 2020å¹´1æœˆ31æ—¥(é‡‘) ã‚¨ã‚¯ã‚¹ãƒãƒ¼ãƒˆå¸Œæœ›ç”³è«‹æœŸé™:2020å¹´1æœˆ31æ—¥(é‡‘) çµ‚äº†æ—¥ä»¥é™ã¯ã€ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã®é–²è¦§ãŠã‚ˆã³æŠ•ç¨¿ã¯è¡Œãˆã¾ã›ã‚“ã€‚æ—¥è¨˜ã®ã‚¨ã‚¯ã‚¹ãƒãƒ¼ãƒˆãŒå¿…è¦ãªæ–¹ã¯ä»¥ä¸‹ã®è¨˜äº‹ã«ã—ãŸãŒã£ã¦æ‰‹ç¶šãã‚’ã—ã¦ãã ã•ã„ã€‚ ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã«æŠ•ç¨¿ã•ã‚ŒãŸæ—¥è¨˜ãƒ‡ãƒ¼ã‚¿ã®ã‚¨ã‚¯ã‚¹ãƒãƒ¼ãƒˆã«ã¤ã„ã¦ - ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—æ—¥è¨˜ ã”åˆ©ç”¨ã®ã¿ãªã•ã¾ã«ã¯ã”è¿·æƒ‘ã‚’ãŠã‹ã‘ã„ãŸã—ã¾ã™ãŒã€ã©ã†ãžã‚ˆã‚ã—ããŠé¡˜ã„ã„ãŸã—ã¾ã™ã€‚ 2020-06-25 è¿½è¨˜ ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—æ—¥è¨˜ã®ã‚¨ã‚¯ã‚¹ãƒãƒ¼ãƒˆãƒ‡ãƒ¼ã‚¿ã¯2020å¹´2æœˆ28
hamaco 2011/05/09
web

security

XSS
ãƒªãƒ³ã‚¯
ãƒ¤ãƒ•ãƒ¼ã«ãŠã‘ã‚‹ã‚¤ãƒ³ãƒ—ãƒƒãƒˆãƒãƒªãƒ‡ãƒ¼ã‚·ãƒ§ãƒ³ã€Œä½•ã‚‚ä¿¡ã˜ã‚‹ãªã€ (Yahoo! JAPAN Tech Blog)
ãƒ¤ãƒ•ãƒ¼æ ªå¼ä¼šç¤¾ã¯ã€2023å¹´10æœˆ1æ—¥ã«LINEãƒ¤ãƒ•ãƒ¼æ ªå¼ä¼šç¤¾ã«ãªã‚Šã¾ã—ãŸã€‚LINEãƒ¤ãƒ•ãƒ¼æ ªå¼ä¼šç¤¾ã®æ–°ã—ã„ãƒ–ãƒã‚°ã¯ã“ã¡ã‚‰ã§ã™ã€‚LINEãƒ¤ãƒ•ãƒ¼ Tech Blog ã“ã‚“ã«ã¡ã¯ã€Rï¼†Dçµ±æ‹¬æœ¬éƒ¨ é–‹ç™ºæŽ¨é€²å®¤ ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ—ãƒ©ãƒƒãƒˆãƒ•ã‚©ãƒ¼ãƒ æŠ€è¡“ ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚¹ãƒšã‚·ãƒ£ãƒªã‚¹ãƒˆã®æˆ¸ç”°ã€€è–«ã§ã™ã€‚ ä»Šå›žã¯ã€ç§ãŸã¡ãŒæ™®æ®µã‹ã‚‰ãƒ¤ãƒ•ãƒ¼ã®ã‚·ã‚¹ãƒ†ãƒ ã«å¯¾ã™ã‚‹å…¥åŠ›ã«ã©ã®ã‚ˆã†ãªæ³¨æ„ã‚’æ‰•ã£ã¦ã„ã‚‹ã®ã‹ã€ãã®ã„ãã¤ã‹ã‚’ã”ç´¹ä»‹è‡´ã—ã¾ã™ã€‚ å…¥åŠ›ã¨ã¯? Webã‚µã‚¤ãƒˆã‚’é‹å–¶ã—ã¦ã„ã‚‹å ´åˆã€ã©ã®ã‚ˆã†ãªå…¥åŠ›ãŒã‚ã‚‹ã§ã—ã‚‡ã†ã‹ï¼Ÿ ãŸã¨ãˆã°ã€Webã‚µãƒ¼ãƒ“ã‚¹ã«ã¯ã€ä»¥ä¸‹ã®å…¥åŠ›ãŒã‚ã‚Šã¾ã™ã€‚ Cookie URL GET/POSTã®ãƒ‡ãƒ¼ã‚¿ ãƒ•ã‚¡ã‚¤ãƒ«ã®ã‚¢ãƒƒãƒ—ãƒãƒ¼ãƒ‰ ãã®ä»–ãƒªã‚¯ã‚¨ã‚¹ãƒˆãƒ˜ãƒƒãƒ€ ãã®ã»ã‹ã«ã‚‚ã„ãã¤ã‚‚ã‚ã‚Šã¾ã™ã€‚ ç’°å¢ƒå¤‰æ•° è¨å®šãƒ•ã‚¡ã‚¤ãƒ« ã‚¯ãƒãƒ¼ãƒ©ãŒå–å¾—ã—ãŸãƒ‡ãƒ¼ã‚¿ ãƒ‘ãƒ¼ãƒˆãƒŠãƒ¼ä¼æ¥ã®APIã‹ã‚‰å–å¾—ã—ãŸãƒ‡ãƒ¼ã‚¿ï¼ˆXMLã‚„JSONãªã©ï¼‰ ãƒ‘ãƒ¼ãƒˆãƒŠãƒ¼ä¼æ¥ã®å…¥ç¨¿ç”¨ F
hamaco 2011/03/25
web

é–‹ç™º

security
ãƒªãƒ³ã‚¯
ã€Žä½“ç³»çš„ã«å¦ã¶ å®‰å…¨ãªWebã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã®ä½œã‚Šæ–¹ã€ã®ã‚¹ã‚¹ãƒ¡ - hnwã®æ—¥è¨˜
(2011/03/04 14:00 è¿½è¨˜)id:shin1x1ã•ã‚“ã®ã¯ã¦ãƒ–ã‚³ãƒ¡ãƒ³ãƒˆã«åŸºã¥ãheaderé–¢æ•°ã®æŒ™å‹•ã«ã¤ã„ã¦ä¿®æ£ã—ã¾ã—ãŸã€‚ã”æŒ‡æ‘˜ã‚ã‚ŠãŒã¨ã†ã”ã–ã„ã¾ã—ãŸã€‚ å¾³ä¸¸æµ©ã•ã‚“ï¼ˆid:ockeghemï¼‰ãŒæ›¸ã‹ã‚ŒãŸã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£æœ¬ã€Žä½“ç³»çš„ã«å¦ã¶ å®‰å…¨ãªWebã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã®ä½œã‚Šæ–¹ã€ãŒ3/1ã«ç™ºå£²ã•ã‚Œã¾ã—ãŸã€‚ã“ã®æœ¬ã¯PHPã®ã‚µãƒ³ãƒ—ãƒ«ã‚³ãƒ¼ãƒ‰ãŒãµã‚“ã ã‚“ã«æç¤ºã•ã‚Œã¦ã„ã‚‹ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã®è§£èª¬æ›¸ã§ã€ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã®ç†è§£ã‚’æ·±ã‚ãŸã„WebæŠ€è¡“è€…å…¨å“¡ã«ãŠå‹§ã‚ã—ãŸã„æœ¬ã§ã™ã€‚ ä½“ç³»çš„ã«å¦ã¶ å®‰å…¨ãªWebã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã®ä½œã‚Šæ–¹ è„†å¼±æ€§ãŒç”Ÿã¾ã‚Œã‚‹åŽŸç†ã¨å¯¾ç–ã®å®Ÿè·µ ä½œè€…: å¾³ä¸¸æµ©å‡ºç‰ˆç¤¾/ãƒ¡ãƒ¼ã‚«ãƒ¼: SBã‚¯ãƒªã‚¨ã‚¤ãƒ†ã‚£ãƒ–ç™ºå£²æ—¥: 2011/03/01ãƒ¡ãƒ‡ã‚£ã‚¢: å˜è¡Œæœ¬è³¼å…¥: 119äºº ã‚¯ãƒªãƒƒã‚¯: 4,283å›žã“ã®å•†å“ã‚’å«ã‚€ãƒ–ãƒã‚° (146ä»¶) ã‚’è¦‹ã‚‹ åƒ•ã¯ã“ã®æœ¬ã®ãƒ¬ãƒ“ãƒ¥ã‚¢ãƒ¼ã¨ã—ã¦å‚åŠ ã•ã›ã¦é ‚ãã¾ã—ãŸãŒã€ä»–ã®ãƒ¬ãƒ“ãƒ¥ã‚¢ãƒ¼ã®æ–¹ã€…ãŒ
hamaco 2011/03/08
book

web

security
ãƒªãƒ³ã‚¯
1