(In)Secure Ajax-Y Websites With PHP

(IN)SECURE AJAX-Y WEBSITES WITH PHP Christian Wenz

Some Statistics ,[object Object],[object Object],[object Object],[object Object],Jun 5, 2009 | |

Why? // The Problem ,[object Object],[object Object],[object Object],[object Object],Jun 5, 2009 | |

Why? // "Hall of Shame" ,[object Object],[object Object],[object Object],Jun 5, 2009 | |

Why? // Explanations ,[object Object],[object Object],[object Object],[object Object],[object Object],Jun 5, 2009 | |

Why? // Traditional Model Jun 5, 2009 | | Server Client

Why? // Ajax Model Jun 5, 2009 | | Server Client

XSS // Problem ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],Jun 5, 2009 | |

XSS // New Dangers ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],Jun 5, 2009 | |

XSS // More Dangers ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],Jun 5, 2009 | |

CSRF // Problem ,[object Object],[object Object],Victim (client) Attacker (web site) Other web site (1) Requests page (2) Sends JavaScript (3) Requests page Jun 5, 2009 | |

CSRF // Countermeasures ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],Jun 5, 2009 | |

SQL Injection // Problem ,[object Object],[object Object],[object Object],Jun 5, 2009 | |

SQL Injection // Bad Ideas ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],Jun 5, 2009 | |

SQL Injection // Fancy attacks ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],Jun 5, 2009 | |

Ajax // JavaScript attacks ,[object Object],[object Object],[object Object],[object Object],Jun 5, 2009 | |

Ajax // Countermeasures ,[object Object],[object Object],Jun 5, 2009 | |

Ajax // Further Concerns ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],Jun 5, 2009 | |

XML // XML attacks ,[object Object],[object Object],[object Object],[object Object],Jun 5, 2009 | |

Regular Expressions // RegEx attacks ,[object Object],[object Object],[object Object],Jun 5, 2009 | |

Automation // Trackbacks ,[object Object],[object Object],[object Object],[object Object],[object Object],Jun 5, 2009 | |

Automation // Comments ,[object Object],[object Object],Jun 5, 2009 | |

Automation // CAPTCHAs ,[object Object],[object Object],[object Object],[object Object],Jun 5, 2009 | |

CAPTCHAs // Countermeasures ,[object Object],[object Object],[object Object],Jun 5, 2009 | |

Because! // Conclusion ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],Jun 5, 2009 | |

Christian's Conference Guide ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],Jun 5, 2009 | |

Thank You! ,[object Object],[object Object],[object Object],Jun 5, 2009 | |

(In)Secure Ajax-Y Websites With PHP

Recommended

Recommended

More Related Content

What's hot

What's hot (12)

Similar to (In)Secure Ajax-Y Websites With PHP

Similar to (In)Secure Ajax-Y Websites With PHP (20)

Recently uploaded

Recently uploaded (20)

(In)Secure Ajax-Y Websites With PHP