Articles in the Online Security Category
Coding, Online Security, PHP, Web Development, Wordpress »
We recently migrated some of our websites to a new VPS with Inmotion hosting. After the migration, everything went smooth (pretty much.. but as smooth as a server transfer can be), except one issue – all the timthumb.php scripts were not working well in Wordpress, which meant that blog thumbnails were not generating.
So for example, the following URL returned a 404 error, and defaulted to Wordpress’ 404 page:
http://www.sonikastudios.com/wp-content/themes/sonikas/scripts/timthumb.php?src=/wp-content/uploads/DSC01426-600×337.jpg&w=100&h=100&zc=1&q=100
This happened on this very blog (www.jeffkee.com) as well. So then I went to check other things out, and found out that other …
Coding, Online Security, Web Development »
I was developing a website on my testserver, which both myself and my client accessed through client.jeffkee.com subdomain. Throughout development, there were a lot of AJAX modules to be put in – AJAX modules that should not be hacked.
Basically the best way to check for the header is to use the $_SERVER['HTTP_REFERER'] variable, and make an if() statement to ensure that the server-side PHP file pertaining to the AJAX module was called by a file within my own server. The $sitepath variable was set to http://client.jeffkee.com/ for match verification.
Once it …
Comedy, Cool Websites, Online Security, Stupid People »
I found Jeremy’s blog through random chances (he replied to a blog post on another blog which linked back to my post about iFags, which I found searching myself on Google), and his most recent post caught my attention for sure.
He got an email from Koffi Anan, the ex secretary general of the United Nations.
It made me completely speechless – the stupidity behind this is simply awe-striking. Who would have thought?
Coding, Online Security, Rants, Stupid People, Web Development »
“It bugs me more than ever when I see a registration email coming from a website I just registered to, saying “Hello, your password is xxxxxxx”. This is just wrong. I do not want my password written ANYWHERE in the world. That tells me that the website is not secure, and the web developers obviously did not do their due diligence.”
First of all, if you do not know what an MD5 Hash concept is, read this description I found on the Wikipedia page for MD5 :
MD5 processes a variable-length message …
Coding, Online Security, Web Development »
Tyler, who visited my blog recently, mentioned that he’s having issues with caching of the files when he uses AJAX. Basically, the result called in from the AJAX code from the php (or could be ASP or any other server-side scripting file, or even an HTML file) would often be a repeat of the last call, resulting in a wrong output. He figured it was an IE cache issue and was attempting to fix it that way.
” . . . the server side file does NOT ever have direct contact …
Coding, Hot Issues, Marketing and Media, Online Security, Software, Web Development »
Maybe this makes me sound like some kind of a nazi or a communist bastard promoting some crap, but it’s really not. The truth is, whenever a friend of mine joined facebook and added me as a friend, I’d write on their walls, “Welcome to the Facebook Revolution!” And there is so much truth to that statement.
I already wrote a lengthy post about why the facebook user interface is so much more superior to that of MySpace or Nexopia or any other social community websites. And I also wrote a …
Comedy, Online Security, Rants, Stupid People »
Today I had this notification pop up from my MSN messenger, which is linked to my hotmail account. And I was absolutely astonished at how this email address even passed as legitimate.
What the hell kind of spam filter is this??? MSN needs to do something about this soon! Needless to say, I didn’t even open the email – it went straight to garbage.



(4.67 out of 5)
(4.00 out of 5)