Tag Info

Hot answers tagged

3

Analyzing this remotely is almost impossible, but here’s my guess: You did not patch/update your Drupal installation quickly after the security advisory SA-CORE-2014-005 was published. This was a highly critical vulnerability, referred to as "Drupageddon". An attacker exploited the vulnerability and got access to your installation. The attacker created ...


2

Facebook in general doesn't like to send users out of it, that's why it makes it difficult for the users to leave. I've had that problem in the past, then stopped, then had it again, there seems to be no reason for this. I think Facebook handles the same links differently. For example sharing a link inside a group is not the same as sharing it on a wall or ...


1

Yep! You were hacked. You have been hacked for a period of time too. Not to panic! It happens enough and can potentially be a low-level breach that can be fixed with not too much worry. HTTPS vs. HTTP is another protocol and not another site. Theoretically, these should be the same site served as either HTTP protocol port 80 or secured/encrypted HTTP ...


1

Yes use HTTPS everywhere, add a HSTS policy, use only TLS, etc. HTTPS already is "the standard" and it's plenty fast enough with a proper server setup...it's just that most folks don't take the time or wanna spend the money to use it. If you consider time to encode a drawback, consider the results of the encoding (good encryption) as a drawback too. I ...


1

I'd say the the focus of CORS is making the web safer for final users and most of it implementation is in fact incapsulated in modern browsers. What I mean is that it is not designed to only make your serverside content protected or unreachable, as you can always NOT send the referrer headers and bypass it. This is clearly not the case for "unconscious" ...


1

If you are going to use Paypal REST API then you need to ensure you are PCI Compliant. ( Which involves alot more than a privacy policy and ssl cert) If you use the PayPal REST APIs for accepting credit card payments, you handle card data directly and will need to ensure you are PCI compliant. ...



Only top voted, non community-wiki answers of a minimum length are eligible