Skip to main content
Share Your Experience: Take the 2024 Developer Survey

Questions tagged [security]

Computer security is security applied to computing devices such as computers and smartphones, as well as to both private and public computer networks, including the whole Internet.

Filter by
Sorted by
Tagged with
0 votes
0 answers
47 views

Securing microservices with Spring Security JWT

I would like to build a RESTful microservices architecture where each microservice acts as a resource server. Additionally, there will be an authorization server responsible only for user registration,...
yaroslav96's user avatar
2 votes
1 answer
43 views

Any possible issues with my approach to Access Management where I'm associating the list of Departments with the User class?

I have a spring boot project with JWT being used for Spring Security. I want to implement Access Management in my project and I'm using this approach. In my project, whenever a user is created, a list ...
Joe's user avatar
  • 23
3 votes
0 answers
27 views

Using Pundit Policy Scopes with Searchkick Results

We are using Searchkick to run our elasticsearch and Pundit to authorize users for specific actions. Below is our module SearchkickScope that does it's best to ...
Romuloux's user avatar
2 votes
2 answers
220 views

Encrypt a String using AES in CBC mode

Your opinion interests me regarding this program. This program encrypts a text message using the AES256 algorithm and CBC. It allows the creation of an encrypted message that contains: The salt used ...
b210205's user avatar
  • 33
2 votes
1 answer
58 views

Reading a date from the start of a text webpage from github to determine if the program is fully updated

...
my_stack_exchange_account's user avatar
2 votes
1 answer
58 views

Production-Readiness Advice for Laravel/ PayPal Integration

I am currently working on integrating PayPal with my Laravel application, and it's my first time incorporating PayPal for production use. I have written the following code and would greatly appreciate ...
titac projets's user avatar
3 votes
1 answer
73 views

Implementation of aes-cbc-hmac combined with xchacha20-poly1305

I’m using two ciphers in this code that are in this order- encrypt plain text with xchacha20-poly1305 then encrypt the resulting ciphertext with aes-cbc-blake2b hmac. I was told elsewhere rather than ...
bismofunyuns's user avatar
1 vote
1 answer
176 views

Is this string-comparison function safe against timing attacks?

Here's a JavaScript function that check the equality of input and secret strings, trying to do that without leaking information ...
Azerum's user avatar
  • 123
5 votes
3 answers
184 views

Generating registration codes

I'm looking for a best practices and security analysis of some code I've written to generate registration codes and avoid duplicates. The class assigns numeric values to the letters A-Z and 0-9 and ...
John Aldrich's user avatar
5 votes
4 answers
3k views

Banking System console app in C++

I built a banking system in C++ (still a lot of features to do but (I decided to post it here to see what can I change so I wont make those mistakes in the future). User header and c++ files Header <...
Ellie's user avatar
  • 549
3 votes
1 answer
137 views

Python command line password generator

After giving a couple of well-received answers to similar questions, I thought I'd try to come up with my own solution. I believe that a good password generator can and should be quite simple without ...
gazoh's user avatar
  • 3,269
1 vote
1 answer
149 views

Password keeper / generator application in Python

I've written this password-keeper application to keep my passwords safe in one place. From something over few lines it grew to almost 200 lines of code. I would greatly appreciate it if someone could ...
Paichiwo's user avatar
  • 161
4 votes
1 answer
75 views

Basic node authentication system

I built a basic authentication system for a node application and I have some security concerns. The username and password the user enters when they log in are stored as plaintext using express-...
HDawG's user avatar
  • 43
1 vote
0 answers
123 views

Modified PoC for BlogEngine.NET CMS (CVE-2019-6714)

This is a modified exploit proof of concept targeting the BlogEngine.NET content management system (CVE-2019-6714) for the .NET framework. I modified it (from Cobb 2019) to execute payloads via ...
Aleksey's user avatar
  • 173
0 votes
1 answer
75 views

Securely store password in database and then show it on demand? [closed]

I have written a small password manager script for my own purposes. It is hosted locally and cannot be accessed outside my local network. You can see the code on GutHub I know it is better to encrypt ...
milenmk's user avatar
  • 147
2 votes
1 answer
205 views

All-JavaScript WhatsApp button

The following code creates a WhatsApp button. How would you improve this code? ...
pointy's user avatar
  • 21
1 vote
0 answers
2k views

Pay with PayPal through cURL and verify

As All PayPal PHP SDK deprecated, I wrote a simple PHP class to make payment with PayPal through cURL and verifying it. Note : I didn't add shipment details for payment because didn't need that. For ...
Kranchi's user avatar
  • 111
7 votes
3 answers
863 views

Brute force search for pdf password in python

I forgot the password to my pdf. I remembered a few characters, so I made a simple password-cracker program in Python. Is the document lost now given the number of combinations? Out of curiosity, how ...
gabriel's user avatar
  • 71
4 votes
0 answers
67 views

Serving Laravel public/ contents when all Laravel files are in the same server directory

I have a Laravel 8 project hosted at xxx/laravel/ on an Apache server, where xxx is the domain. I want to serve the contents of <...
Ichi's user avatar
  • 93
4 votes
0 answers
3k views

Reactive JWT authentication using Spring webflux

Greeting to all senior devs here. I'm trying to create a project for my small business. There are not many tutorial on how to create Reactive JWT authentication with Spring webflux. So I'm a bit ...
Patrick's user avatar
  • 331
3 votes
2 answers
1k views

Saving form data to a text file on server

I want to save simple string data as a simple text file (.txt) on the server (together with the IP), but I cannot find any clear guideline on how to do this correctly/efficiently/safely. (Maybe I'm ...
gaspar's user avatar
  • 163
4 votes
0 answers
127 views

Securely generate Token for authentication

In my experience i had the need that some application (both desktop and web) can excange data to authenticate users (even if the data for authenticating users are not reacheable form desktop ...
Skary's user avatar
  • 248
1 vote
1 answer
948 views

ASP.NET Core Authorization handler that allows request from private IP ranges

In a docker compose solution, there are multiple ASP.NET Core projects. Each of them provide a service. Some of them can be accessed from internet (with REST APIs), some of them are for local docker ...
Parsa99's user avatar
  • 133
0 votes
1 answer
168 views

Password policy with regex and zxcvbn

This code snippet shows an implementation of a password policy check. - The method composition uses regex to verify that the password meets composition criteria (at least one number, one special ...
questıoner's user avatar
2 votes
1 answer
457 views

Password hashing for safe storage with Argon

This code snippet implements password hashing for safe storage. It uses Argon2 as hashing algorithm. The method hash_password() is used to hash and salt a password. ...
questıoner's user avatar
5 votes
3 answers
344 views

Cryptographically secure version of the core array_rand() function

I want a cryptographically secure version of array_rand(). Is this it? ...
hanshenrik's user avatar
3 votes
0 answers
186 views

Simple websocket chat app

I'm coding a simple websocket chat app. I was wondering if my code is secure and efficient. I also have a question about the way how I'm sending objects and then checking the type, is there anything ...
MousTea's user avatar
  • 31
5 votes
1 answer
1k views

Rijndael Cipher in C++ (128bit AES)

I am a hobbyist and do not work in the industry, but I do have an interest in programming an cryptography. I decided to have a go at writing a 128bit implementation of AES in C++. This is my first ...
WireInTheGhost's user avatar
4 votes
1 answer
140 views

Weighted Union-Find class

For a final project I used a weighted union-find and decided to implement it in Python. I wrote it to be as general as possible so it's very portable. I do plan on looking into path compression to ...
Gabe Ron's user avatar
  • 143
6 votes
2 answers
880 views

Bash-based Port scanner (/dev/tcp)

This question is ideal in my case: Ludisposed's python-scapy-tcp-port-scan-of-subnet - At codereview stackexchange But this is not Scapy; nor Python(it might get used in the future though but that is ...
William Martens's user avatar
1 vote
1 answer
150 views

Is this session manager secure?

I'm looking for best practices for writing secure session managers. I'm making a table for the authorization token (UUID OR GUIDv4) with autoincrement, user_id, token, status (enum) then update status ...
Taa Lee's user avatar
  • 37
1 vote
1 answer
87 views

Python: token request, SQL user fetch and API calls

I have the files as below. What I'm looking for is some feedback with regards to security, reliability, maintenance, scaling and performance. What is going on? Make a request to get a token to access ...
pee2pee's user avatar
  • 380
1 vote
2 answers
83 views

Security of my upload script #2

I recently asked this question and got a response. I made improvements, it now checks if the file is an image and/or used UUID to store the images, and now I want to see if it's good or not. How ...
user13477176's user avatar
2 votes
1 answer
539 views

Boolean expression evaluation for user input using evil eval

The following code is a module that evaluates boolean expressions, which are entered through an unauthorized web API. The exposed function of the library being used is ...
Richard Neumann's user avatar
1 vote
1 answer
580 views

How do I make my program that creates RSA keys and encrypts and decrypts a file more secure

...
The Masked Rebel's user avatar
5 votes
2 answers
205 views

Serve rescaled jpg images on demand with myphoto!500.jpg syntax (here 500px-width rescaled)

On web pages, obviously large photos (e.g. 4000x4000px) cannot be served with a reliance on CSS to do the resizing: it would be too slow for end users and too bandwidth-consuming for the server. So it'...
Basj's user avatar
  • 264
2 votes
1 answer
579 views

Protect Routes/Page with NextJS [closed]

I have a simple project that I built that protects the routes/pages of the website by using the if and else statement and putting each page with a function ...
Mohammad Khan's user avatar
6 votes
0 answers
483 views

Bash script for pull-mode backups via restic's rest-server

I wrote the following Bash scripts to make pull-mode backups with restic, a backup solution written in Golang, similar to Borg Backup. The main use case for this script is pulling backups into a ...
andrew-e's user avatar
  • 353
2 votes
1 answer
170 views

Prevent Column Name Collision

I have been working on a series of posts about a library to connect to databases but most of the scenarios I have to resort to some "JOIN" the problem arose when two or more tables had some ...
user avatar
1 vote
1 answer
1k views

script to recover browser passwords

basically i am new to python lookin for any bad practices done down there in my script, any ways to shrink the code and increase efficiency ...
LyZeN77's user avatar
  • 147
1 vote
1 answer
80 views

Simple web page to enhance browsing of IMSLP music collections

I'm building a simple webpage that allow users to find the intersection of different category lists on a wiki (imslp.org) since the site itself does not offer this functionality. I have a simple HTML ...
amount's user avatar
  • 63
3 votes
1 answer
133 views

A simple C# script that exploits PHP command injections

Back in 2016, I wrote a simple C# script that exploits a generic command injection vulnerability on PHP webapps, just for the sake of demonstrating that exploits can be written in .NET languages (due ...
Aleksey's user avatar
  • 173
4 votes
1 answer
2k views

.Net 5.0 Get User Email From Claims

From searching online I have identified two ways to get the user email, but I don't know if either has pro's/con's beyond Option.1 being a larger number of lines of code? Option.1 I have a dedicated <...
DMur's user avatar
  • 143
5 votes
1 answer
141 views

Storing and confirming user input

I am a beginner, and I'm trying to secure a sign-login system on my website. Is my code good/enough to prevent SQL injection? THIS IS THE SIGN FILES This is the index.php that takes user input: ...
irtexas19's user avatar
  • 173
4 votes
1 answer
81 views

Security of the login code on the website

I wrote the code to log in php to the admin panel. Everything works as it should. But I am not sure if it is well written code and if it is safe. I care about security. I have read a lot about it but ...
test's user avatar
  • 41
1 vote
1 answer
57 views

Please check out my code incrementer

I recently developed code that can run as a function parameter but I'm not quite sure how vulnerable it is to hacks and/or cheats. Also, is there anything I could improve? ...
Ethan Belcher's user avatar
5 votes
2 answers
963 views

Securing my password wallet

I am currently learning C++, so I made this basic password wallet for Ubuntu. Its source code is in the /opt directory and it has a symlink so i can launch it from ...
Anass Youness's user avatar
6 votes
1 answer
141 views

Security of CS50 Calculator code (eval)

This is my first question on Code Review, so please let me know if I botched anything. After working for quite a while on my CS50 calculator, it has finally reached the point where I am completely ...
M-Chen-3's user avatar
  • 153
3 votes
1 answer
63 views

Client-server application for logging running processes

My first client-server application. It's a simple Python script that gets a list of running processes from Server_1 and writes it to a datetime-named file on ...
Bn.F76's user avatar
  • 133
8 votes
3 answers
263 views

Is my website's PHP registration system secure?

I would like to know if my registration system is secure. I'm not sure if it is secure, as I'm new in development, and I'm afraid that the system is flawed Also, I'm not experienced in object oriented ...
Warlock's user avatar
  • 193

1
2 3 4 5
16