security Archives - Page 30 of 38

WordPress

IT Nursery

Are there procedures to prevent malicious plugin updates?

This is a random thought I’ve had today. Here’s the scenario: I’ve got a plugin on the WordPress store with 100+ active installs. ...

April 27, 2022
0 Comments

WordPress

IT Nursery

is_email() VS sanitize_email()

If I’m allowing a user to enter an email address to be saved into the database, should I use is_email() or sanitize_email()? Ex. ...

April 27, 2022
0 Comments

WordPress

IT Nursery

Why “Contact Form 7” doesn’t update PHPmailer library?

I realized that popular WordPress plugin Contact Form 7 uses this library https://github.com/PHPMailer/PHPMailer. When I check source of mail, which has been sended ...

April 27, 2022
0 Comments

WordPress

IT Nursery

Can upload doc and pdf but not ppt – not permitted for security reasons

“Insert search engine here” was pretty useless for this one – I’ve had a look through wp-includes/functions.php, wp-admin/includes/file.php etc. but not found a ...

April 27, 2022
0 Comments

WordPress

IT Nursery

Nonces can be reused multiple times? Bug / Security issue?

I’ve read that nonces are meant to be for one time use only, and after an ajax request, you should issue a new ...

April 27, 2022
0 Comments

WordPress

IT Nursery

Are the default salts secure?

When installing a fresh wordpress, one of the things one should do is, updating the salts in wp-config.php. The section looks like this ...

April 27, 2022
0 Comments

Are PDO prepared statements sufficient to prevent SQL injection?

Let’s say I have code like this: $dbh = new PDO("blahblah"); $stmt = $dbh->prepare('SELECT * FROM users where username = :username'); $stmt->execute( array(':username' ...

April 27, 2022
0 Comments

WordPress

IT Nursery

How do I technically prove that WordPress is secure?

One of my clients forces me to do their project without WordPress. But WordPress is the best for his requirements. What he said ...

April 27, 2022
0 Comments

WordPress

IT Nursery

WordPress Ajax Data Security

I am aware of nonces to check for intentions but can’t make any sense if I can use them to restrict for database ...

April 26, 2022
0 Comments

How can bcrypt have built-in salts?

Coda Hale’s article “How To Safely Store a Password” claims that: bcrypt has salts built-in to prevent rainbow table attacks. He cites this ...

April 26, 2022
0 Comments