secure your website , scripts , patches , php , html , jquery , asp .
Arbitrary file download — more precisely known as path traversal or directory traversal — happens when a web application lets a user specify a filename to retrieve, but doesn't properly restrict that input to the files it's actually meant to serve. The result: an attacker can potentially retrieve any file the web server process has permission to read, not just the ones the application intended to expose.
Read more: Arbitrary File Download (Path Traversal): How It Happens and How to Prevent It
Beside using CAPTCHA there is alternative methods to protect your website control panel .
This is a simple tutorial i made with sessions in PHP to prevent brute force attacks against your website by limiting login attempts for users .
Read more: Limit Login Attempts - Blocking Brute Force Attacks
Remote code execution means an attacker can run their own commands on a device they don't own or control — regardless of where that device physically is. It's considered the most severe class of vulnerability a piece of software can have, because it doesn't just expose data or crash a service; it hands the attacker the ability to do essentially anything the compromised program is allowed to do.
Local File Inclusion (LFI) is similar to a Remote File Inclusion vulnerability except instead of including remote files, only local files i.e. files on the current server can be included. The vulnerability is also due to the use of user-supplied input without proper validation.
URL redirection Exploit
- what is url redirection ?
- Iam a developer , how i can protect my script from url redirection ?
- Iam a user , how i can protect my self from fishing, maliciouse links ?