3
votes
3answers
34 views

Web user authentication methods

Is there any method besides using a DB with username and password for authenticating a user?
0
votes
1answer
513 views

What does it mean to infect people with silent java drive?

I've got a weird contact message through my website, claiming they have found a security vulnerability and wonder if I have a bug bounty program. The details they shared: Only what I can say is ...
0
votes
1answer
208 views

Creating a backdoor in (your own) PHP website [closed]

I've just built a website for a client and I'm a bit worried he won't pay me once it actually goes live. I've heard there are ways to create a back-door so I could access the website whenever I want. ...
0
votes
1answer
54 views

What to do on a bogus/scammer site?

We just found out that one of our client's website has a bogus site. The domain name is somewhat similar to our client's name, only matter of word is the difference. What alarms us is this bogus site ...
2
votes
0answers
59 views

Good security practice for writing a php/mysql web app [closed]

I'm about to create a web app that is php/mysql based. It should contain multiple users and two levels of admin accounts. It will most likely not be very likely to be attacked in any way. Still I am ...
0
votes
1answer
24 views

Web server with or without Panel [closed]

I start a Web server for my company for hosting about 15 website and I didn't install a Control Panel, I do everything by command and i'm pretty comfortable with it but do you think i'm losing time by ...
4
votes
1answer
137 views

Website still blocked after hack

I manage a website that was hacked a few months ago (I wasn't the webmaster then), it was running on Joomla. I have manages to redo the website with custom codes (php/mysql), but it still some ...
4
votes
1answer
168 views

Best way to protect public facing development environments?

We're in the process of setting up individualized dev environments for our developers. All of our developers are remote and we don't have a VPN or anything to bring this in house. But here's the ...
4
votes
1answer
1k views

IIS Dynamic IP Restrictions Module and Googlebot

I consider using IIS Dynamic IP Restrictions Module in order to make it hard for DoS (Denial of Service) attacks. But I am not sure how that would work out for search engine bots like Googlebot. Any ...
1
vote
1answer
747 views

How to integrate Paypal Direct Payment (i.e. Paypal Pro) with custom shopping cart application?

I've written a basic shopping cart application that is fully functional except for the payment process. I have decided to use PayPal Direct Payment, or "PayPal Pro," but am unsure of how to integrate ...
2
votes
1answer
11k views

Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request

I have a joomla website installed and working good. i installed Qlue404 component which redirects 404 page to a custom page., sometimes when i try the symbols ' and some others the 404 page appears ...
0
votes
1answer
118 views

What are the types of verification which can be used for a social networking website?

I'm developing a social networking website for a small network. I would like to keep more security on registration process. I would like to keep some verification methods like SMS, Visa and Paypal (if ...
6
votes
1answer
95 views

Is it necessary for a web developer to know how to hack website?

I'm a web developer. I'm just wondering that is it necessary for a web developer to know how to hack website than developing a website?
9
votes
3answers
3k views

what is wwws.site.com

I know about https for securing important pages like login and such. But why would someone create a separate subdomain like wwws as well? for example https://wwws.site.com/login
0
votes
1answer
246 views

Developing payment gateway

I have an idea of developing internet payment gateway similar to PayPal or Webmoney. Since i'm only sophomore at Computer Science, and i've only taken intermediate programming classes, i've no idea ...
7
votes
3answers
1k views

Important fields in HTTP header from security perspective

What are the Important fields in HTTP header from security perspective? I tried to google it but unable to find. Can anybody provide me a link to read about it? Thanks in advance.