Security through obscurity is hardly a good security measure. Micro$oft have been hiding their source code for how many years?..and how many trojans and viruses successfully get through that?
wikipedia is a bunch of php scripts etc...it's a matter of truly understanding security issues, and always being vigilant.
perhaps a useful visual comparison would be that to building a bridge over a chasm. a beginner instict for the "strongest" bridge would be a solid block of material spanning the gap. but instead a well designed series of arcs is stronger, and much more practical, and cheaper too. so too in security you need to evaluate the threats in terms of typical attacks, e.g. DOS attack, SQL injection, DNS poisoning, etc..well established vectors of attack. And for a little CGI script, you want to know that people can't read the script itself (over the web) and the CGI permissions don't end up giving them indirect access into the whole file system.
the hardest line to type correctly is: stty erase ^H
Posts are HTML formatted. Put <p> </p> tags around your paragraphs. Put <code> </code> tags around your code and data!
Titles consisting of a single word are discouraged, and in most cases are disallowed outright.
Read Where should I post X? if you're not absolutely sure you're posting in the right place.
Please read these before you post! —
Posts may use any of the Perl Monks Approved HTML tags:
- a, abbr, b, big, blockquote, br, caption, center, col, colgroup, dd, del, details, div, dl, dt, em, font, h1, h2, h3, h4, h5, h6, hr, i, ins, li, ol, p, pre, readmore, small, span, spoiler, strike, strong, sub, summary, sup, table, tbody, td, tfoot, th, thead, tr, tt, u, ul, wbr
You may need to use entities for some characters, as follows. (Exception: Within code tags, you can put the characters literally.)
| |
For: |
|
Use: |
| & | | & |
| < | | < |
| > | | > |
| [ | | [ |
| ] | | ] |
Link using PerlMonks shortcuts! What shortcuts can I use for linking?
See Writeup Formatting Tips and other pages linked from there for more info.