[B! è„†å¼±æ€§] pcds90netã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

pcds90net id:pcds90net

è„†å¼±æ€§ã«é–¢ã™ã‚‹pcds90netã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (10)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

ã€ã“ã‚Œã¯é…·ã„ã€‘DMMã®ã‚²ãƒ¼ãƒ ã®ç›—è´ã—ãŸãƒˆãƒ¼ã‚¯ãƒ³ã‚’æµç”¨ã—ã¦ã€åˆ¥ã®ã‚²ãƒ¼ãƒ ãŒä¹—ã£å–ã‚Œã‚‹ã‹è©¦ã—ã¦ã¿ãŸã€è¿½åŠ å®Ÿé¨“ã€‘ - Windows 2000 Blog
3rdã«å¼•ã£è¶Šã—ã¾ã—ãŸã€‚ 2010/12/31 ä»¥å‰ï¼†2023/1/1 ä»¥é™ã®è¨˜äº‹ã‚’é–‹ãã¨ï¼•ç§’å¾Œã«ãƒªãƒ€ã‚¤ãƒ¬ã‚¯ãƒˆã•ã‚Œã¾ã™ã€‚ æ™®æ®µã®æ—¥è¨˜ã¯ ã‚ã£ã¡[http://thyrving.livedoor.biz/] ã“ã¡ã‚‰ã«ã¯æŠ€è¡“é–¢ä¿‚ã®ã¡ã‚‡ã£ã¨ãƒžãƒ‹ã‚¢ãƒƒã‚¯ãªè¨˜äº‹ã‚„ãƒ‹ãƒ¥ãƒ¼ã‚¹ã‚’è¼‰ã›ã¾ã™ã€‚ Windows2000ãƒã‚¿ä¸å¿ƒã«æ¯Žæ—¥æ›´æ–°ã€‚ ã€ãŠè©«ã³ã€‘åƒå¹´æˆ¦äº‰ã‚¢ã‚¤ã‚®ã‚¹ ã‚„ åˆ€å‰£ä¹±èˆžã‚’å«ã‚€DMMã®æ®†ã©å…¨ã¦ã®ã‚²ãƒ¼ãƒ ã§ä¹—ã£å–ã‚Œã‚‹ã“ã¨ãŒåˆ¤æ˜Ž ã¡ã‚‡ã£ã¨ã€æ›´ã«ã²ã©ã„ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ¼ãƒ›ãƒ¼ãƒ«ã‚’æ€ã„ã¤ã„ãŸã®ã§ã€æ¤œè¨¼ã‚’ã—ã¦ã¿ã‚‹ã“ã¨ã«ã—ã¾ã—ãŸã€‚ DMMã®APIãƒˆãƒ¼ã‚¯ãƒ³æ–‡å—åˆ—ã«ã‚²ãƒ¼ãƒ IDã‚„ãƒ¡ãƒ³ãƒãƒ¼IDã€ã‚³ãƒ³ãƒãƒ¼ãƒãƒ³ãƒˆã®URLãŒå«ã¾ã‚Œã¦ã‚‹ã£ã¦ã“ã¨ã¯ ãã“ã ã‘ã€åˆ¥ã®ã‚²ãƒ¼ãƒ ã«ç½®ãæ›ãˆãŸã‚‰ä¹—ã£å–ã‚Œã‚‹ã®ã§ã¯ï¼Ÿ ã¨è€ƒãˆãŸã‹ã‚‰ã å–ã‚Šæ•¢ãˆãšè‰¦ã“ã‚Œã®ãƒ‘ã‚±ãƒƒãƒˆã‚’ã‚ãƒ£ãƒ—ãƒãƒ£ã—ã¦ã¶ã£ã“æŠœãã¾ã™ ãã‚Œã‚’ã€åˆ€å‰£ä¹±èˆžã®ãƒ‡ãƒ¼ã‚¿ã§æ›¸ãæ›ãˆã¾ã™ ã¯ã„ã€ä¹—ã£å–ã‚ŠæˆåŠŸã€‚ ã©ã†ã„
pcds90net 2017/08/28
è„†å¼±æ€§

ãƒˆãƒ¼ã‚¯ãƒ³

*ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

ã“ã‚Œã¯ã²ã©ã„
ãƒªãƒ³ã‚¯
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£è¨ºæ–ãƒ»æ¤œæŸ»ã®GMOã‚µã‚¤ãƒãƒ¼ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ byã‚¤ã‚¨ãƒ©ã‚¨
GMOã‚µã‚¤ãƒãƒ¼ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ byã‚¤ã‚¨ãƒ©ã‚¨æ ªå¼ä¼šç¤¾ã¯å›½å†…ãƒˆãƒƒãƒ—ã‚¯ãƒ©ã‚¹ã®ãƒ›ãƒ¯ã‚¤ãƒˆãƒãƒƒã‚«ãƒ¼ãŒå¤šæ•°åœ¨ç±ã™ã‚‹ã‚µã‚¤ãƒãƒ¼ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã®ä¼šç¤¾ã§ã™ã€‚æ”»æ’ƒæ‰‹æ³•ã«é–¢ã™ã‚‹è±Šå¯ŒãªçŸ¥è˜ã¨æœ€å…ˆç«¯ã®æŠ€è¡“ã‚’æŒã¤ãƒ›ãƒ¯ã‚¤ãƒˆãƒãƒƒã‚«ãƒ¼ãŒä»®æƒ³æ•µã¨ãªã‚Šã€ãŠå®¢æ§˜ã®æŠ±ãˆã‚‹ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ä¸Šã®å•é¡Œã®å¯è¦–åŒ–ã¨èª²é¡Œè§£æ±ºã‚’ã‚µãƒãƒ¼ãƒˆã—ã¾ã™ã€‚ ã€Œèª°ã‚‚ãŒçŠ ç‰²ã«ãªã‚‰ãªã„ç¤¾ä¼šã‚’å‰µã‚‹ã€ã‚’ãƒŸãƒƒã‚·ãƒ§ãƒ³ã¨ã—ã¦æŽ²ã’ã€ãƒ‡ã‚¸ã‚¿ãƒ«ãƒã‚¤ãƒ†ã‚£ãƒ–ã®æ™‚ä»£ã‚’ç”Ÿãã‚‹ã™ã¹ã¦ã®äººãŒå®‰å…¨ã«æš®ã‚‰ã›ã‚‹ã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆç¤¾ä¼šå‰µã‚Šã«è²¢çŒ®ã—ã¾ã™ã€‚
pcds90net 2014/06/05
SSL

security

è„†å¼±æ€§

OpenSSL
ãƒªãƒ³ã‚¯
OpenID 2.0ã®ä¸€éƒ¨å®Ÿè£…ã«è„†å¼±æ€§ã€ãã®è©³ç´°ã¨å¯¾ç–ã¨ã¯
OpenID 2.0ã®ä¸€éƒ¨å®Ÿè£…ã«è„†å¼±æ€§ã€ãã®è©³ç´°ã¨å¯¾ç–ã¨ã¯ï¼šãƒ‡ã‚¸ã‚¿ãƒ«ãƒ»ã‚¢ã‚¤ãƒ‡ãƒ³ãƒ†ã‚£ãƒ†ã‚£æŠ€è¡“æœ€æ–°å‹•å‘ è‡¨æ™‚ä¾¿ ç±³OpenID FoundationãŒ8æœˆ15æ—¥ã«ã€OpenID 2.0ã®ä¸€éƒ¨OpenID Providerï¼ˆOPï¼‰å®Ÿè£…ã«ãŠã„ã¦ã€Relying Partyï¼ˆRPï¼‰ä¸Šã§ã®ã‚¢ã‚«ã‚¦ãƒ³ãƒˆãƒã‚¤ã‚¸ãƒ£ãƒƒã‚¯ã«ã¤ãªãŒã‚‹å¯èƒ½æ€§ã®ã‚ã‚‹é‡å¤§ãªè„†å¼±æ€§ãŒè¦‹ã¤ã‹ã£ãŸã“ã¨ã‚’ã‚¢ãƒŠã‚¦ãƒ³ã‚¹ã—ã¾ã—ãŸã€‚ã“ã®è¨˜äº‹ã§ã¯ã€ãã®è©³ç´°ã¨å¯¾ç–ã«ã¤ã„ã¦è¿°ã¹ã¾ã™ã€‚ 8æœˆ15æ—¥ã«å…¬è¡¨ã•ã‚ŒãŸã‚¢ã‚«ã‚¦ãƒ³ãƒˆãƒã‚¤ã‚¸ãƒ£ãƒƒã‚¯ã®è„†å¼±æ€§ OpenID Foundation Japanã€Evangelistã®@novã§ã™ã€‚ 2013å¹´8æœˆ15æ—¥ã«ç±³OpenID Foundationã‹ã‚‰ãƒªãƒªãƒ¼ã‚¹ãŒã‚ã£ãŸã‚ˆã†ã«ã€OpenID 2.0ã®ä¸€éƒ¨OpenID Providerï¼ˆOPï¼‰å®Ÿè£…ã«ã€Relying Partyï¼ˆRPï¼‰ä¸Šã§ã®ã‚¢ã‚«ã‚¦ãƒ³ãƒˆãƒã‚¤ã‚¸ãƒ£ãƒƒã‚¯ã«ã¤ãªãŒã‚‹å¯èƒ½æ€§ã®ã‚
pcds90net 2013/08/24
è„†å¼±æ€§

OpenID

Security

OAuth
ãƒªãƒ³ã‚¯
ç¬¬45å›žã€€å…¥åŠ›ãƒãƒªãƒ‡ãƒ¼ã‚·ãƒ§ãƒ³ã¯ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å¯¾ç– | gihyo.jp
ã€Œå…¥åŠ›ãƒãƒªãƒ‡ãƒ¼ã‚·ãƒ§ãƒ³ã¯ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å¯¾ç–ã§ã‚ã‚‹ã€ã¯ä¸–ç•Œã®å¸¸è˜ã§ã™ã€‚å°‘ãªãã¨ã‚‚å¤§å¤šæ•°ã®ä¸–ç•Œã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å°‚é–€å®¶ã¯ã€Œå…¥åŠ›ãƒãƒªãƒ‡ãƒ¼ã‚·ãƒ§ãƒ³ã¯ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å¯¾ç–ã€ã¯å¸¸è˜ã ã¨è€ƒãˆã¦ã„ã¾ã™ã€‚ ã‚‚ã¡ã‚ã‚“å…¥åŠ›ãƒãƒªãƒ‡ãƒ¼ã‚·ãƒ§ãƒ³å¯¾ç–ãŒã™ã¹ã¦ã§ã‚ã‚‹ã‚ã‘ã§ã¯ãªãã€ã»ã‹ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å¯¾ç–ã‚‚é‡è¦ã§ã™ãŒã€å…¥åŠ›ãƒãƒªãƒ‡ãƒ¼ã‚·ãƒ§ãƒ³ãŒæœ€ã‚‚é‡è¦ãªå¯¾ç–ã®1ã¤ã§ã‚ã‚‹ã€ã¨è€ƒãˆã¦ã„ã‚‹äººã¯æ²¢å±±ã„ã¾ã™ã€‚ å…¥åŠ›ã®ãƒãƒªãƒ‡ãƒ¼ã‚·ãƒ§ãƒ³ã¯ã™ã¹ã¦ã®ãƒ—ãƒã‚°ãƒ©ãƒ ã«å¿…é ˆã®ä¿è·æ©Ÿèƒ½ã§ã™ã€‚ä¸€éƒ¨ã«ã€Œå…¥åŠ›ãƒãƒªãƒ‡ãƒ¼ã‚·ãƒ§ãƒ³ã¯ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å¯¾ç–ã§ã¯ãªã„ã€ã¨ã™ã‚‹å£°ã‚‚ã‚ã‚‹ã‚ˆã†ã§ã™ãŒã€å…¥åŠ›ãƒãƒªãƒ‡ãƒ¼ã‚·ãƒ§ãƒ³ã¯é–“é•ã„ãªãã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å¯¾ç–ã§ã™ã€‚å…¥åŠ›ãƒãƒªãƒ‡ãƒ¼ã‚·ãƒ§ãƒ³ã¯ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å¯¾ç–ã§ã¯ãªã„ã€ã¨ã™ã‚‹è€ƒãˆæ–¹ã¯ã€æ··ä¹±ã‚’æ‹›ãã ã‘ã§ã™ã€‚ å…¥åŠ›ãƒãƒªãƒ‡ãƒ¼ã‚·ãƒ§ãƒ³ã‚’ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å¯¾ç–ã¨ã—ã¦ã„ã‚‹ã®ã¯ç†è€…ã®ã¿ã§ã¯ã‚ã‚Šã¾ã›ã‚“ã€‚ä¸–ç•Œçš„ã«åˆ©ç”¨ã•ã‚Œã¦ã„ã‚‹ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£æ¨™æº–ã§ã‚‚ã€å…¥åŠ›ãƒãƒªãƒ‡ãƒ¼ã‚·ãƒ§ãƒ³ã‚’éžå¸¸ã«æœ‰åŠ¹ãªã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å¯¾ç–ã¨ã—ã¦ã¨ã‚‰
pcds90net 2011/12/20
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

è„†å¼±æ€§

*ã‚ã¨ã§èªã‚€
ãƒªãƒ³ã‚¯
ã€Žã‚ˆãã‚ã‹ã‚‹PHPã®æ•™ç§‘æ›¸ã€ã®SQLã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³è„†å¼±æ€§ - ockeghem's blog
ã“ã®ã‚¨ãƒ³ãƒˆãƒªã§ã¯ã€æ•°å€¤åž‹ã®åˆ—ã«å¯¾ã™ã‚‹SQLã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³ã«ã¤ã„ã¦èª¬æ˜Žã—ã¾ã™ã€‚ ä»¥å‰ã®ã‚¨ãƒ³ãƒˆãƒªã§ã€ãŸã«ãã¡ã¾ã“ã¨ã•ã‚“ã®æ›¸ã‹ã‚ŒãŸã€Žã‚ˆãã‚ã‹ã‚‹PHPã®æ•™ç§‘æ›¸ã€ã®è„†å¼±æ€§ã«ã¤ã„ã¦æŒ‡æ‘˜ã—ã¾ã—ãŸã€‚ãã®éš›ã«ã€ã€Žç§ãŒè¦‹ãŸç¯„å›²ã§ã¯SQLã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³è„†å¼±æ€§ã¯ã‚ã‚Šã¾ã›ã‚“ã§ã—ãŸã€ã¨æ›¸ãã¾ã—ãŸãŒã€ãã®å¾ŒPHPã‚«ãƒ³ãƒ•ã‚¡ãƒ¬ãƒ³ã‚¹2011ã®è¬›æ¼”æº–å‚™ã‚’ã—ã¦ã„ã‚‹éš›ã«ã€åŒæ›¸ã‚’è¦‹ã¦ã„ã¦SQLã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³è„†å¼±æ€§ãŒã‚ã‚‹ã“ã¨ã«æ°—ãŒã¤ãã¾ã—ãŸã€‚ è„†å¼±æ€§ã®èª¬æ˜Ž å•é¡Œã®ç®‡æ‰€ã¯åŒæ›¸P272ã®delete.phpã§ã™ã€‚è¦ç‚¹ã®ã¿ã‚’ç¤ºã—ã¾ã™ã€‚ $id = $_REQUEST['id']; // $id : æŠ•ç¨¿ID $sql = sprintf('SELECT * FROM posts WHERE id=%d', mysql_real_escape_string($id) $record = mysql_query($sql) or die(
pcds90net 2011/09/27
è„†å¼±æ€§

*ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
ãƒªãƒ³ã‚¯
PHPã®ã‚¤ã‚¿ã„å…¥é–€æ›¸ã‚’èªã‚“ã§Ajaxã®XSSã«ã¤ã„ã¦æ¤œè¨Žã—ãŸ(1) - ockeghem's blog
ã“ã®ã‚¨ãƒ³ãƒˆãƒªã§ã¯ã€ã‚ã‚‹PHPã®å…¥é–€æ›¸ã‚’é¡Œæã¨ã—ã¦ã€Ajaxã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã®è„†å¼±æ€§ã«ã¤ã„ã¦æ¤œè¨Žã—ã¾ã™ã€‚å…¨3å›žã¨ãªã‚‹äºˆå®šã§ã™ã€‚ ã“ã®ã‚¨ãƒ³ãƒˆãƒªã‚’æ›¸ã„ãŸãã£ã‹ã‘ twitterã‹ã‚‰ã‚¿ãƒ¬ã‚³ãƒŸã‚’ã¡ã‚‡ã†ã ã„ã—ã¦ã€ä½œã‚ŠãªãŒã‚‰åŸºç¤Žã‹ã‚‰å¦ã¶PHPã«ã‚ˆã‚‹Webã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³å…¥é–€XAMPP/jQuery/HTML5ã§ä½œã‚‹ã‚¤ãƒžãƒ‰ã‚ã®Weã¨ã„ã†æœ¬ã‚’èªã¿ã¾ã—ãŸã€‚æ‰€æ„Ÿã¯ä»¥ä¸‹ã®é€šã‚Šã§ã™ã€‚ ã‚¿ãƒ¬ã‚³ãƒŸæ°ã®ä¸»å¼µã®ã‚ˆã†ã«ã€æœ¬æ›¸ã¯ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚’ä¸€åˆ‡è€ƒæ…®ã—ã¦ã„ãªã„ ä¸»ãªè„†å¼±æ€§ã¯ã€XSSã€SQLã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³ã€ä»»æ„ã®ã‚µãƒ¼ãƒãƒ¼ã‚µã‚¤ãƒ‰ãƒ»ã‚¹ã‚¯ãƒªãƒ—ãƒˆå®Ÿè¡Œï¼ˆã‚¢ãƒƒãƒ—ãƒãƒ¼ãƒ‰çµŒç”±ï¼‰ã€ãƒ¡ãƒ¼ãƒ«ãƒ˜ãƒƒãƒ€ã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³ç‰ è„†å¼±æ€§ä»¥å‰ã®å•é¡Œã¨ã—ã¦ã‚µãƒ³ãƒ—ãƒ«ã‚¹ã‚¯ãƒªãƒ—ãƒˆã®å“è³ªãŒä½Žã„ã€‚ãƒ‡ãƒãƒƒã‚°ã—ãªã„ã¨å‹•ã‹ãªã„ã‚¹ã‚¯ãƒªãƒ—ãƒˆãŒå¤šæ•°ã‚ã£ãŸ ä¸Šè¨˜ã«é–¢é€£ã—ã¦ã€æµç”¨å…ƒã®ã‚½ãƒ¼ã‚¹ã‚„ãƒ‡ãƒãƒƒã‚°ç”¨ã®alertãªã©ãŒã‚³ãƒ¡ãƒ³ãƒˆã¨ã—ã¦æ®‹ã£ã¦ã„ã¦ç—›ã€…ã—ã„ ä»Šæ™‚ã“ã®æ°´æº–ã¯ãªã„ã‚ãƒ¼ã¨æ€ã„ã¾ã—ãŸã€‚ä»¥å‰
pcds90net 2011/09/06
è„†å¼±æ€§

XSS

*ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
ãƒªãƒ³ã‚¯
PHP5.3.7ã®crypté–¢æ•°ã®ãƒã‚°ã¯ã“ã†ã—ã¦ç”Ÿã¾ã‚ŒãŸ
æ˜¨æ—¥ã®ãƒ–ãƒã‚°ã‚¨ãƒ³ãƒˆãƒªã€ŒPHP5.3.7ã®crypté–¢æ•°ã«è‡´å‘½çš„ãªè„†å¼±æ€§(Bug #55439)ã€ã«ã¦ã€crypté–¢æ•°ã®é‡å¤§ãªè„†å¼±æ€§ã«ã¤ã„ã¦å ±å‘Šã—ã¾ã—ãŸã€‚è„†å¼±æ€§ã®å‡ºæ–¹ãŒè¿‘å¹´ã¾ã‚Œã«è¦‹ã‚‹ã»ã©ã®ã‚‚ã®ã ã£ãŸã®ã§ã€twitterã‚„ãƒ–ã‚¯ãƒžãªã©ã‚’è¦‹ã¦ã‚‚ã€ã€Œã©ã†ã—ã¦ã“ã†ãªã£ãŸã€ã¨ã„ã†ç–‘å•ã‚’å¤šæ•°ç›®ã«ã—ã¾ã—ãŸã€‚ ãã“ã§ã€ã“ã®ã‚¨ãƒ³ãƒˆãƒªã§ã¯ã€ã“ã®è„†å¼±æ€§ãŒã©ã®ã‚ˆã†ã«æ··å…¥ã—ãŸã®ã‹ã‚’è¿½ã£ã¦ã¿ãŸã„ã¨æ€ã„ã¾ã™ã€‚ PHPã®ãƒ¬ãƒã‚¸ãƒˆãƒªã®ãƒã‚°ã‚„å…¬é–‹ã•ã‚Œã¦ã„ã‚‹ã‚½ãƒ¼ã‚¹ã®çŠ¶æ³ã‹ã‚‰ã€PHP5.3.7RC4ã¾ã§ã“ã®ãƒã‚°ã¯ãªãã€PHP5.3.7RC5ã§ã“ã®ãƒã‚°ãŒæ··å…¥ã—ãŸæ¨¡æ§˜ã§ã™ã€‚RC5ã¯PHP5.3.7æœ€å¾Œã®Release Candidateã§ã™ã‹ã‚‰ã€ã¾ã•ã«æ£å¼ãƒªãƒªãƒ¼ã‚¹ã®ç›´å‰ã§ãƒã‚°ãŒå…¥ã£ãŸã“ã¨ã«ãªã‚Šã¾ã™ã€‚ ãƒã‚°ã®å…¥ã‚‹ç›´å‰ã®ã‚½ãƒ¼ã‚¹ã¯ã€ã“ã“ã®é–¢æ•°php_md5_crypt_rã‹ã‚‰å‚ç…§ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚ä»¥ä¸‹ã«ã€ãŠãŠã¾ã‹ãªæµã‚Œã‚’å›³ç¤ºã—ã¾ã™ã€‚ã¾ãšã¯ãƒ
pcds90net 2011/08/24
PHP

è„†å¼±æ€§

*security

*ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
ãƒªãƒ³ã‚¯
PHP5.3.7ã®crypté–¢æ•°ã«è‡´å‘½çš„ãªè„†å¼±æ€§(Bug #55439)
PHP5.3.7ã®crypté–¢æ•°ã«ã¯è‡´å‘½çš„ãªè„†å¼±æ€§ãŒã‚ã‚Šã¾ã™ã€‚æœ€æ‚ªã®ã‚±ãƒ¼ã‚¹ã§ã¯ã€ä»»æ„ã®ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã§ãƒã‚°ã‚¤ãƒ³ã§ãã¦ã—ã¾ã†ã¨ã„ã†äº‹æ…‹ãŒç™ºç”Ÿã—ã¾ã™ã€‚è©²å½“ã™ã‚‹åˆ©ç”¨è€…ã¯ã€è‡³æ€¥ã€å¾Œè¿°ã™ã‚‹å›žé¿ç–ã‚’å®Ÿæ–½ã™ã‚‹ã“ã¨ã‚’æŽ¨å¥¨ã—ã¾ã™ã€‚ æ¦‚è¦ PHPã®crypté–¢æ•°ã¯ã€ã‚½ãƒ«ãƒˆä»˜ããƒãƒƒã‚·ãƒ¥å€¤ã‚’ç°¡å˜ã«æ±‚ã‚ã‚‹ã“ã¨ãŒã§ãã¾ã™ï¼ˆå…¬å¼ãƒªãƒ•ã‚¡ãƒ¬ãƒ³ã‚¹ï¼‰ã€‚crypté–¢æ•°ã®ãƒãƒƒã‚·ãƒ¥ã‚¢ãƒ«ã‚´ãƒªã‚ºãƒ ã¨ã—ã¦MD5ã‚’æŒ‡å®šã—ãŸå ´åˆã€ã‚½ãƒ«ãƒˆã®ã¿ãŒå‡ºåŠ›ã•ã‚Œã€ãƒãƒƒã‚·ãƒ¥å€¤ãŒç©ºã«ãªã‚Šã¾ã™ã€‚ã“ã‚Œã¯ã€crypté–¢æ•°ã®çµæžœãŒã‚½ãƒ«ãƒˆã®ã¿ã«ä¾å˜ã—ã€ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã«ã¯å½±éŸ¿ã•ã‚Œãªã„ã“ã¨ã‚’æ„å‘³ã—ã€crypté–¢æ•°ã‚’èªè¨¼ã«ç”¨ã„ã¦ã„ã‚‹å ´åˆã€ä»»æ„ã®ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã§ãƒã‚°ã‚¤ãƒ³ã«æˆåŠŸã™ã‚‹å¯èƒ½æ€§ãŒã‚ã‚Šã¾ã™ã€‚ å½±éŸ¿ã‚’å—ã‘ã‚‹ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ crypté–¢æ•°ã‚’ç”¨ã„ã€ãƒãƒƒã‚·ãƒ¥ã‚¢ãƒ«ã‚´ãƒªã‚ºãƒ ã¨ã—ã¦MD5ã‚’æŒ‡å®šã—ã¦ã„ã‚‹ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã€‚ ç’°å¢ƒã«ã‚‚ä¾å˜ã—ã¾ã™ãŒã€ãƒ‡ãƒ•ã‚©ãƒ«ãƒˆãŒMD5ã®å ´åˆã‚‚ã‚ã‚Šã¾ã™ã€‚ç†è€…ã®ãƒ†ã‚¹ãƒˆç’°å¢ƒ
pcds90net 2011/08/23
PHP

è„†å¼±æ€§

ã“ã‚Œã¯ã²ã©ã„
ãƒªãƒ³ã‚¯
OWASP Top Ten | OWASP Foundation
This website uses cookies to analyze our traffic and only share that information with our analytics partners. Accept Important note: OWASP Top Ten 2025 Current project status as of September 2024: We are planning to announce the release of the OWASP Top 10:2025 in the first half of 2025. Data Collection (Now - December 2024): Please donate your application penetration testing statistics. Stay Tune
pcds90net 2011/08/10
Webã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒªã‚¹ã‚¯TOP10

*ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

è„†å¼±æ€§

ãƒ©ãƒ³ã‚ãƒ³ã‚°
ãƒªãƒ³ã‚¯
yet2come: BlackHatã§ç™ºè¡¨ã•ã‚ŒãŸæ”»æ’ƒæ‰‹æ³•(sslstrip)ã«ã¤ã„ã¦
æ˜¨æ—¥Black Hatã§ã€ŒNew Tricks For Defeating SSL in Practiceã€ã¨ã„ã†ç™ºè¡¨ãŒã‚ã‚Šã¾ã—ãŸã€‚æµ·å¤–ã®ãƒ¡ãƒ‡ã‚£ã‚¢ã§ã¯ã€ã‚ã¾ã‚Šé©åˆ‡ã§ãªã„ã‚¿ã‚¤ãƒˆãƒ«ã§è¨˜äº‹ã«ãªã£ã¦ã„ã‚‹ã¨ã“ã‚ã‚‚è¦‹å—ã‘ã‚‰ã‚Œã¾ã™ã€‚ Website danger as hacker breaks SSL encryption(ITpro.co.uk) Black Hat : Hacking SSL with sslstrip(internetnews.com) ã‚¿ã‚¤ãƒˆãƒ«ã ã‘èªã‚€ã¨ã€ã¾ã‚‹ã§SSLãŒè§£èªã•ã‚ŒãŸã‹ã®ã‚ˆã†ãªå°è±¡ã‚’å—ã‘ã‚‹ã®ã§ã™ãŒã€çµè«–ã‹ã‚‰è¨€ãˆã°ã€å®Ÿéš›ã«ç´¹ä»‹ã•ã‚Œã¦ã„ã‚‹æ‰‹æ³•ã¨ã—ã¦ã¯ä¸é–“è€…æ”»æ’ƒ(man-in-the-middle attack)ã®å¿œç”¨ã§ã™ã€‚ãƒ—ãƒ¬ã‚¼ãƒ³ã®ã‚¹ãƒ©ã‚¤ãƒ‰ã¯ã“ã¡ã‚‰ã€‚ ï¼ƒã•ãã»ã©ã€ãƒ“ãƒ‡ã‚ªã‚‚å…¬é–‹ã•ã‚ŒãŸã‚ˆã†ãªã®ã§ã€ã”èˆˆå‘³ã®ã‚ã‚‹ã‹ãŸã¯ã©ã†ãž ã•ã¦å®Ÿã¯ã€ã“ã®Moxie Marlinspikeã•
pcds90net 2011/06/16
è„†å¼±æ€§

SSL

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

*ã‚ã¨ã§èªã‚€
ãƒªãƒ³ã‚¯
1