<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>PHP Programming &#187; Security</title>
	<atom:link href="http://www.idontplaydarts.com/tag/security/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.idontplaydarts.com</link>
	<description>A blog about Linux, Apache, MySQL, PHP and web application security</description>
	<lastBuildDate>Thu, 29 Jul 2010 14:08:22 +0000</lastBuildDate>
	<generator>http://wordpress.org/?v=2.8</generator>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
			<item>
		<title>MongoDB is vulnerable to SQL injection (in PHP at least)</title>
		<link>http://www.idontplaydarts.com/2010/07/mongodb-is-vulnerable-to-sql-injection-in-php-at-least/</link>
		<comments>http://www.idontplaydarts.com/2010/07/mongodb-is-vulnerable-to-sql-injection-in-php-at-least/#comments</comments>
		<pubDate>Thu, 29 Jul 2010 12:24:46 +0000</pubDate>
		<dc:creator>Phil</dc:creator>
				<category><![CDATA[MySQL]]></category>
		<category><![CDATA[PHP]]></category>
		<category><![CDATA[Security]]></category>
		<category><![CDATA[Injection]]></category>
		<category><![CDATA[MongoDB]]></category>

		<guid isPermaLink="false">http://www.idontplaydarts.com/?p=512</guid>
		<description><![CDATA[Its a misconception amongst some PHP programmers that because MongoDB doesn&#8217;t use SQL (all queries are passed in as either BSON or PHP objects which have been converted into BSON) it isn&#8217;t vulnerable to SQL injection. It is pretty easy to show that if your lazy and complacent when you code you can leave yourself [...]]]></description>
		<wfw:commentRss>http://www.idontplaydarts.com/2010/07/mongodb-is-vulnerable-to-sql-injection-in-php-at-least/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Skills shortage leaves Australian Computer Society open to attack.</title>
		<link>http://www.idontplaydarts.com/2010/01/skills-shortage-leaves-australian-computer-society-open-to-attack/</link>
		<comments>http://www.idontplaydarts.com/2010/01/skills-shortage-leaves-australian-computer-society-open-to-attack/#comments</comments>
		<pubDate>Fri, 22 Jan 2010 03:04:40 +0000</pubDate>
		<dc:creator>Phil</dc:creator>
				<category><![CDATA[HTML]]></category>
		<category><![CDATA[Security]]></category>
		<category><![CDATA[ACS]]></category>
		<category><![CDATA[CSRF]]></category>
		<category><![CDATA[JavaScript]]></category>
		<category><![CDATA[XSS]]></category>

		<guid isPermaLink="false">http://www.idontplaydarts.com/?p=475</guid>
		<description><![CDATA[According to the Australian Computer Society and DIAC (The department for immigration) there is a massive shortage in Australia of &#8220;Computing Professionals specialising in Network Security/Firewall/Internet Security&#8221;. 
No surprise there, whats more of a shocker is that the very people who assess the skills of would be migrants to Australia can&#8217;t even secure their own [...]]]></description>
		<wfw:commentRss>http://www.idontplaydarts.com/2010/01/skills-shortage-leaves-australian-computer-society-open-to-attack/feed/</wfw:commentRss>
		<slash:comments>2</slash:comments>
		</item>
		<item>
		<title>How not to advertise for a PHP programming job</title>
		<link>http://www.idontplaydarts.com/2009/10/how-not-to-advertise-for-a-php-programming-job/</link>
		<comments>http://www.idontplaydarts.com/2009/10/how-not-to-advertise-for-a-php-programming-job/#comments</comments>
		<pubDate>Wed, 28 Oct 2009 16:31:17 +0000</pubDate>
		<dc:creator>Phil</dc:creator>
				<category><![CDATA[PHP]]></category>
		<category><![CDATA[Security]]></category>
		<category><![CDATA[CSRF]]></category>
		<category><![CDATA[CSS]]></category>
		<category><![CDATA[hacking]]></category>
		<category><![CDATA[HTML]]></category>
		<category><![CDATA[Web development]]></category>

		<guid isPermaLink="false">http://www.idontplaydarts.com/?p=451</guid>
		<description><![CDATA[So I got an email today for a job in Tower Hill (thats central london).  The job came with a simple programming test to write a script that parsed a tab separated file and produced a batch script as the output. They kindly provided a working copy of their solution on their website so [...]]]></description>
		<wfw:commentRss>http://www.idontplaydarts.com/2009/10/how-not-to-advertise-for-a-php-programming-job/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Breaking a CAPTCHA &#8211; rules for good design</title>
		<link>http://www.idontplaydarts.com/2009/06/breaking-a-captcha-rules-for-good-design/</link>
		<comments>http://www.idontplaydarts.com/2009/06/breaking-a-captcha-rules-for-good-design/#comments</comments>
		<pubDate>Sun, 07 Jun 2009 16:10:08 +0000</pubDate>
		<dc:creator>Phil</dc:creator>
				<category><![CDATA[Security]]></category>
		<category><![CDATA[Captcha]]></category>
		<category><![CDATA[PHP GD]]></category>
		<category><![CDATA[Web development]]></category>

		<guid isPermaLink="false">http://www.idontplaydarts.com/?p=122</guid>
		<description><![CDATA[The main problem with the Captcha is that sometimes the people who implement them are lazy or have no knowledge about how create an image that a computer would find hard to decode. Captchas must be generated server side and over the last few months I have seen an increase in the number of client-side captchas generated by software such as Adobe Flex. If you generate a Captcha client side it is not secure.]]></description>
		<wfw:commentRss>http://www.idontplaydarts.com/2009/06/breaking-a-captcha-rules-for-good-design/feed/</wfw:commentRss>
		<slash:comments>2</slash:comments>
		</item>
		<item>
		<title>Creating secure web applications</title>
		<link>http://www.idontplaydarts.com/2008/11/creating-secure-web-applications/</link>
		<comments>http://www.idontplaydarts.com/2008/11/creating-secure-web-applications/#comments</comments>
		<pubDate>Thu, 20 Nov 2008 10:25:57 +0000</pubDate>
		<dc:creator>Phil</dc:creator>
				<category><![CDATA[Security]]></category>
		<category><![CDATA[ssdlc]]></category>

		<guid isPermaLink="false">http://80.68.93.53/wordpress/?p=15</guid>
		<description><![CDATA[So many companies tend to think of security as an afterthought. When it comes to developing Web Applications many companies and clients in particular seem to have their priorities wrong.]]></description>
		<wfw:commentRss>http://www.idontplaydarts.com/2008/11/creating-secure-web-applications/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>When usability and security meet</title>
		<link>http://www.idontplaydarts.com/2008/10/when-usability-and-security-meet/</link>
		<comments>http://www.idontplaydarts.com/2008/10/when-usability-and-security-meet/#comments</comments>
		<pubDate>Sun, 26 Oct 2008 10:54:40 +0000</pubDate>
		<dc:creator>Phil</dc:creator>
				<category><![CDATA[Security]]></category>
		<category><![CDATA[Usability]]></category>

		<guid isPermaLink="false">http://80.68.93.53/wordpress/?p=30</guid>
		<description><![CDATA[Nearly always when your writing a website or web application usability and security clash - this clash is normally brought about by the client or designer insisting on specific features. As a Web Applications Developer and Linux administrator it is my opinion is that usability should never interfere with security.
]]></description>
		<wfw:commentRss>http://www.idontplaydarts.com/2008/10/when-usability-and-security-meet/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>
