meta user
network profile
| bio | website | martinstoeckli.ch |
|---|---|---|
| location | Switzerland | |
| age | 40 | |
| visits | member for | 1 year, 11 months |
| seen | 15 hours ago | |
| stats | profile views | 167 |
I belong to the lucky people, who can combine job and hobby, in my case writing software. Coming from the Delphi world, i'm working more and more with CSharp and use PHP for my spare time project, an internet lost-and-found office.
|
May 6 |
awarded | Caucus |
|
Apr 15 |
comment |
Why are Win7 IE browers running in IE7 mode? If i remember correctly, IE sometimes falls back if the HTML is not valid. You could check your pages with the W3 validator. Whether your page is loaded in compatibility mode you can check easily yourself, open your page in IE and press F12 to enter the developer tools. |
|
Mar 13 |
awarded | Nice Answer |
|
Dec 20 |
answered | CSS style viewer/tester |
|
Dec 7 |
comment |
Web Form Testing For integration tests i'm using simpletest, it is written in PHP but can test any website. |
|
Dec 6 |
comment |
How do I know my email open rate? This technique is also called webbug, and is used a lot by spammers to harvest email addresses, that's why most email clients block this images. |
|
Nov 26 |
answered | How to remove /index.html |
|
Nov 21 |
comment |
Phpmyadmin http password security @w3d - Ahh yes, that sounds plausible. |
|
Nov 21 |
comment |
Phpmyadmin http password security Maybe you mixed up http and https in point 2? If available, i would always use https to administrate your webpage. |
|
Nov 18 |
awarded | Fanatic |
|
Aug 22 |
answered | Does CSS 'em' sizing still matter? |
|
Aug 16 |
comment |
a hashed password doesn't match the same hashed password? I read that you already solved your problem, nevertheless i would recommend, that you read a bit about properly hashing passwords. Today it's recommended to use bcrypt, with a unique salt for each password. Using the bcrypt hash can be even easier than your example with the MD5() function, i tried to explain the important points in this article. |
|
Jul 26 |
comment |
https (SSL) instead of http for mobile users @john - Do you recommend not to care about security, because nothing is 100% safe? HTTPS allows the user to prevent a MITM attack if he really cares, that's much better than offering nothing. The 50 dollars are well spent, especially if you consider, that SSL-Strip needs control over the user's access point, before you can start the attack. BTW do you know a better way to prevent MITM attacks? |
|
Jul 24 |
awarded | Constituent |
|
Jul 24 |
awarded | Caucus |
|
Jul 4 |
comment |
Find Email from URL link Don't you think spammers would love this easy way? |
|
Jun 27 |
comment |
Need private personal access to ~three PHP pages @Lèse majesté - I shouldn't have written it so absolute, but actually my answer was meant to be positive. There are hosters, which offer what Roger wants for free, so why not use it? |
|
Jun 26 |
comment |
Need private personal access to ~three PHP pages @ danelfree - The keypoint is, that you have to install something on each client manually, either a plugin, a certificate or a key. This maybe acceptable or not, that depends on the requirements of the user. It is not safe, to load the encryption-code from the server, because you cannot make sure that you get the original untampered code, without using SSL. |
|
Jun 25 |
revised |
Need private personal access to ~three PHP pages added 15 characters in body |
|
Jun 25 |
comment |
Need private personal access to ~three PHP pages @Lèse majesté - What you write is true, it is possible to do the encryption yourself. The problem is, that you have to install a software on the client side, before you can encrypt the data, while todays browser have built-in support for HTTPS/SSL. The software could even be a downloadable javascript, but then you face the problem, that an attacker can do the same steps as the client does. So, it is possible to do it on your own, but i can see only disadvantages. I will edit my answer anyway. |
