I was walking through my server logs and the following kinda stunned me: ACCESS ERROR 404 from IP 22.214.171.124: Path: /index.php?page=weblog&env=../../../../../../../../etc/passwd%00 ...
Is my password sent unencrypted when using Phpmyadmin through http? If not, is there any downside using http compared to https?
We have a site which is HTTP, but it has an admin part. How can we secure the admin part with HTTPS? For example, WordPress (which I know) is located at http://foo.com, but we want to have ...