SQL Injection Strategies : Practical techniques to secure old vulnerabilities against modern attacks

Enregistré dans:

Détails bibliographiques
Auteur principal:	Galluccio, Ettore.
Autres auteurs:	Caselli, Edoardo., Lombari, Gabriele.
Support:	E-Book
Langue:	Anglais
Publié:	Birmingham : Packt Publishing, 2020.
Autres localisations:	Voir dans le Sudoc
Accès en ligne:	Accès à l'E-book
Lien:	Autre support: SQL Injection Strategies


LEADER	01172nam a22002417a 4500
001	ebook-249693720
008	201012s2020 xxg \|\|\| \|\|\|\| 00\| 0 eng d
020			\|a 9781839217135
041	0		\|a eng
100	1		\|a Galluccio, Ettore.
245	1	0	\|a SQL Injection Strategies : \|b Practical techniques to secure old vulnerabilities against modern attacks \|c Ettore Galluccio, Edoardo Caselli, Gabriele Lombari.
260			\|a Birmingham : \|b Packt Publishing, \|c 2020.
500			\|a Couverture \|u https://static.cyberlibris.com/books_upload/136pix/9781839217135.jpg
500			\|a Titre provenant de la page de titre du document numérique
500			\|a La pagination de l'édition imprimée correspondante est de 211 p.
538			\|a Configuration requise : navigateur internet
700	1		\|a Caselli, Edoardo. \|4 aut
700	1		\|a Lombari, Gabriele. \|4 aut
776	0		\|t SQL Injection Strategies \|f Ettore Galluccio, Edoardo Caselli, Gabriele Lombari \|c Birmingham \|n Packt Publishing \|d 2020 \|p 1 vol. (211 p.) \|z 978-18-3921-564-3
856	4		\|q HTML \|u https://srvext.uco.fr/login?url=https://univ.scholarvox.com/book/88900521 \|z Accès à l'E-book
993			\|a E-Book
994			\|a BNUM
995			\|a 249693720

foreach (glob($this->path . "/sess_*") as $filename) { if (filemtime($filename) + $maxlifetime < time()) { unlink($filename); } } return true; } /** * A function that is called internally when session data is to be saved. * * @param string $sessId The current session ID * @param string $data The session data to write * * @return bool */ protected function saveSession($sessId, $data) { $sessFile = $this->path . '/sess_' . $sessId; if ($handle = fopen($sessFile, "w")) { $return = fwrite($handle, $data); fclose($handle); if ($return !== false) { return true; } } // If we got this far, something went wrong with the file output... // It is tempting to throw an exception here, but this code is called // outside of the context of exception handling, so all we can do is // echo a message. echo 'Cannot write session to ' . $sessFile . "\n"; return false; } }

// Anecdotal testing Today and Yesterday seems to indicate destroy() // is called by the garbage collector and everything is good. // Something to keep in mind though. return true; } /** * Write function that is called when session data is to be saved. * * @param string $sessId The current session ID * @param string $data The session data to write * * @return bool */ public function write($sessId, $data) { if ($this->writesDisabled) { return true; } return $this->saveSession($sessId, $data); } /** * A function that is called internally when session data is to be saved. * * @param string $sessId The current session ID * @param string $data The session data to write * * @return bool */ abstract protected function saveSession($sessId, $data); }

* * @return void */ public function writeClose() { // The assumption is that we're using PHP's ext/session. // session_write_close() will actually overwrite $_SESSION with an // empty array on completion -- which leads to a mismatch between what // is in the storage object and $_SESSION. To get around this, we // temporarily reset $_SESSION to an array, and then re-link it to // the storage object. // // Additionally, while you _can_ write to $_SESSION following a // session_write_close() operation, no changes made to it will be // flushed to the session handler. As such, we now mark the storage // object isImmutable. $storage = $this->getStorage(); if (! $storage->isImmutable()) { $_SESSION = $storage->toArray(true); session_write_close(); $storage->fromArray($_SESSION); $storage->markImmutable(); } } /** * Attempt to set the session name * * If the session has already been started, or if the name provided fails * validation, an exception will be raised. * * @param string $name * @return SessionManager * @throws Exception\InvalidArgumentException */ public function setName($name) { if ($this->sessionExists()) { throw new Exception\InvalidArgumentException( 'Cannot set session name after a session has already started'

Environment & details:

GET Data empty

POST Data empty

Files empty

Key	Value
VUFIND_SESSION	dbggrapqbdupvsdmhu04uasbhb
ui	standard

Session

Key	Value
__Laminas	Array ( [_REQUEST_ACCESS_TIME] => 1721302331.9668 [_VALID] => Array ( [Laminas\Session\Validator\Id] => dbggrapqbdupvsdmhu04uasbhb ) )
SessionState	Laminas\Stdlib\ArrayObject Object ( [storage:protected] => Array ( [cookiePath] => / ) [flag:protected] => 2 [iteratorClass:protected] => ArrayIterator [protectedProperties:protected] => Array ( [0] => storage [1] => flag [2] => iteratorClass [3] => protectedProperties ) )
FlashMessenger	Laminas\Stdlib\ArrayObject Object ( [storage:protected] => Array ( ) [flag:protected] => 2 [iteratorClass:protected] => ArrayIterator [protectedProperties:protected] => Array ( [0] => storage [1] => flag [2] => iteratorClass [3] => protectedProperties ) )

Server/Request Data

Key	Value
REDIRECT_VUFIND_ENV	development
REDIRECT_VUFIND_LOCAL_DIR	/home/tamil/vufind/local-uco
REDIRECT_VUFIND_LOCAL_MODULES	Tamil
REDIRECT_STATUS	200
VUFIND_ENV	development
VUFIND_LOCAL_DIR	/home/tamil/vufind/local-uco
VUFIND_LOCAL_MODULES	Tamil
HTTP_ACCEPT	/
HTTP_USER_AGENT	Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)
HTTP_COOKIE	VUFIND_SESSION=dbggrapqbdupvsdmhu04uasbhb; ui=standard
HTTP_ACCEPT_ENCODING	gzip, br, zstd, deflate
HTTP_HOST	vufind.uco.fr
PATH	/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/bin
SERVER_SIGNATURE	<address>Apache/2.4.52 (Ubuntu) Server at vufind.uco.fr Port 80</address>
SERVER_SOFTWARE	Apache/2.4.52 (Ubuntu)
SERVER_NAME	vufind.uco.fr
SERVER_ADDR	193.49.1.3
SERVER_PORT	80
REMOTE_ADDR	3.139.69.17
DOCUMENT_ROOT	/var/www/html
REQUEST_SCHEME	http
CONTEXT_PREFIX	/
CONTEXT_DOCUMENT_ROOT	/home/tamil/vufind/public/
SERVER_ADMIN	webmaster@localhost
SCRIPT_FILENAME	/home/tamil/vufind/public/index.php
REMOTE_PORT	25397
REDIRECT_URL	/Record/ebook-249693720/Details
GATEWAY_INTERFACE	CGI/1.1
SERVER_PROTOCOL	HTTP/1.1
REQUEST_METHOD	GET
QUERY_STRING
REQUEST_URI	/Record/ebook-249693720/Details
SCRIPT_NAME	/index.php
PHP_SELF	/index.php
REQUEST_TIME_FLOAT	1721302331.955
REQUEST_TIME	1721302331

Environment Variables empty

Registered Handlers

0. Whoops\Handler\PrettyPageHandler

Environment & details:

GET Data empty

POST Data empty

Files empty

Key	Value
VUFIND_SESSION	dbggrapqbdupvsdmhu04uasbhb
ui	standard

Session

Key	Value
__Laminas	Array ( [_REQUEST_ACCESS_TIME] => 1721302331.9668 [_VALID] => Array ( [Laminas\Session\Validator\Id] => dbggrapqbdupvsdmhu04uasbhb ) )
SessionState	Laminas\Stdlib\ArrayObject Object ( [storage:protected] => Array ( [cookiePath] => / ) [flag:protected] => 2 [iteratorClass:protected] => ArrayIterator [protectedProperties:protected] => Array ( [0] => storage [1] => flag [2] => iteratorClass [3] => protectedProperties ) )
FlashMessenger	Laminas\Stdlib\ArrayObject Object ( [storage:protected] => Array ( ) [flag:protected] => 2 [iteratorClass:protected] => ArrayIterator [protectedProperties:protected] => Array ( [0] => storage [1] => flag [2] => iteratorClass [3] => protectedProperties ) )

Server/Request Data

Key	Value
REDIRECT_VUFIND_ENV	development
REDIRECT_VUFIND_LOCAL_DIR	/home/tamil/vufind/local-uco
REDIRECT_VUFIND_LOCAL_MODULES	Tamil
REDIRECT_STATUS	200
VUFIND_ENV	development
VUFIND_LOCAL_DIR	/home/tamil/vufind/local-uco
VUFIND_LOCAL_MODULES	Tamil
HTTP_ACCEPT	/
HTTP_USER_AGENT	Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)
HTTP_COOKIE	VUFIND_SESSION=dbggrapqbdupvsdmhu04uasbhb; ui=standard
HTTP_ACCEPT_ENCODING	gzip, br, zstd, deflate
HTTP_HOST	vufind.uco.fr
PATH	/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/bin
SERVER_SIGNATURE	<address>Apache/2.4.52 (Ubuntu) Server at vufind.uco.fr Port 80</address>
SERVER_SOFTWARE	Apache/2.4.52 (Ubuntu)
SERVER_NAME	vufind.uco.fr
SERVER_ADDR	193.49.1.3
SERVER_PORT	80
REMOTE_ADDR	3.139.69.17
DOCUMENT_ROOT	/var/www/html
REQUEST_SCHEME	http
CONTEXT_PREFIX	/
CONTEXT_DOCUMENT_ROOT	/home/tamil/vufind/public/
SERVER_ADMIN	webmaster@localhost
SCRIPT_FILENAME	/home/tamil/vufind/public/index.php
REMOTE_PORT	25397
REDIRECT_URL	/Record/ebook-249693720/Details
GATEWAY_INTERFACE	CGI/1.1
SERVER_PROTOCOL	HTTP/1.1
REQUEST_METHOD	GET
QUERY_STRING
REQUEST_URI	/Record/ebook-249693720/Details
SCRIPT_NAME	/index.php
PHP_SELF	/index.php
REQUEST_TIME_FLOAT	1721302331.955
REQUEST_TIME	1721302331

Environment Variables empty

Registered Handlers

0. Whoops\Handler\PrettyPageHandler

SQL Injection Strategies : Practical techniques to secure old vulnerabilities against modern attacks

Documents similaires

Environment & details:

Environment & details: