Setting up a custom 404 error page serves two purposes:
- It allows you to present your users a nice message rather than the ugly, server-generated default page.
- It serves to mask the server’s identity – so, security is a little better.
The first point is obvious. But the second point may need some clarification – why do we care about the server’s identity?
The reason is – when a potential attacker knows which server your application is …
Seam is quite a good and secure framework as far as frameworks go. However, with a simple ServletFilter, it can be made just a little bit more secure, and maybe help you pass that next audit. In this post you’ll see how to define a Seam servlet filter to secure your website just a little bit more.…
Timing attacks are very difficult to pull off, but are possible nevertheless. However, it is quite easy to protect your Cake application against them, and as an aside – against incremental password crackers brute-forcing. This post shows you how.…
CakePHP’s security component is awesome. I use it all the time for its CSRF protection (Which will be the subject of a future post).
But sometimes, it does not work as expected. Frustration ensues.
In one of my projects, I have a form with a few text areas on it. The user uses this form to create or edit a story. After adding the security component to the controller, I noticed that when the user submits …
Recent Comments
- Medovarszki: This post saved my hair from falling out but yeah, I beat my head against the wall now too
- Shehryar: Probably the ebst spring web mvc tutorial I have read, explain everything in great detail. i loved it, this...
- armand: You do not resize the image. You just display it smaller using html tag attributes. It would be nice to...
- COTP: ** Just to clarify, in CakeErrorController.php (the copy in app/Controller/) public function beforeRender() {...
- COTP: For CakePHP 2.0+, you can copy lib/Cake/Controller/CakeErrorC ontroller.php to app/Controller/CakeErrorCon...
- Medovarszki: This post saved my hair from falling out but yeah, I beat my head against the wall now too
Categories
- Android (1)
- appengine (3)
- Be nice to your users (6)
- CakePHP (13)
- General (5)
- Googlemaps (3)
- Java (11)
- javaScript (4)
- jQuery (11)
- Seam (2)
- Security (4)
- Spring MVC (1)
- Spring Webflow (2)
- User Interface (5)
- Wordpress (2)
Archives
- January 2012 (2)
- December 2011 (1)
- July 2011 (2)
- June 2011 (4)
- May 2011 (1)
- December 2010 (3)
- November 2010 (1)
- August 2010 (2)
- July 2010 (2)
- June 2010 (4)
- May 2010 (4)
- April 2010 (5)
- March 2010 (3)



