Hot answers tagged security
3
If you want something that's immediately noticeable as a security change to the visitor, Google: "Trusted green browser bar", which for modern browsers turns most if not the entire browser address bar green (depending on the browser).
This is occurs when a site has a "Premium SSL" certificate installed, more specifically called an "Extended Validation ...
2
You need to return 401 for technical reasons: the 401 is what tells the browser to prompt the user for a username and password. If you don't return 401, nobody will be able to log in because their browsers will never prompt them to log in! This situation is only applicable to 401 which is tightly tied to the authentication built in to the HTTP protocol. When ...
2
Here is Firefox's page about attack sites and malware.
Malware is software designed to infect your computer without your knowledge. Malware is most often used to steal personal information, send junk e-mail (spam), or spread more malware.
Attack Sites are Web sites that try to infect your computer with malware when you visit. These attacks can be ...
1
Here some "neutral information concerning "SSL certificates" and website security:
https://en.wikipedia.org/wiki/Certificate_authority
A SSL certificate provides a secure connection for your users as well as assurance to visit the "original" domain (See phishing).
https://www.us-cert.gov/ncas/tips/ST05-010
A SSL certificate does in no way guarantee ...
1
I doubt that @Joe's answer will work, as the injection script is likely encrypted or at least obfuscated.
It appears that SiteCake is written in PHP, so do a search for base64_decode, str_rot13 and gzdeflate as these are often used to disguise exploit code.
It is by no means certain that components using these commands are definitely malware, but the ...
Only top voted, non community-wiki answers of a minimum length are eligible
