Tags: style http io ar os sp java for strongIt suddenly occurred to me today that a sample of the tool from Astah-professional specialized in the ER diagram was used to get the Java code, a pretty good piece of code that only needs to be connected by JDBC to obtain database information, mainly through Java.sql.DatabaseMetaData this class is implemented. Just record it and share it! 1. db.properties Driver=org.postgresql.driver url=jdbc:postgresql://12.3.3.3:5432/testusername=
, it will display the list of directories (unless you have closed the list of displayed directory files).DirectoryIndex index.php index.php3 messagebrd.pl index.html index.htmRedirect (rewrite)1. Open mod_rewrite:LoadModule Rewrite_module modules/mod_rewrite.so2.Options +indexes +followsymlinks +execcgiAllowOverride AllOrder Allow,denyAllow from all3. Create the rule in the. htaccess file:Rewriteengine onRewriterule ^index (\d+) \.html$/index.php?id=$1Passwo
JavaScript-based plugins. For example, 添加到桌面 now is a section of the JS code in Safari.In addition to the features that Apple has demonstrated on WWDC, this improvement in safari means that surfing the web can be a great experience. For example, you can directly call 1Password or Lastpassword saved account password in Safari login, if your iphone has Touch ID fingerprint identification, you can even directly fingerprint authentication login.Pocket.co
koala bear ". Now, you can use the first letter of each word in the sentence, add some punctuation marks, and replace some letters with numbers. In this case, the password is mFA1tkB !.
7. Use applications and tools to create and manage passwords.
Sometimes, even if you follow the tips listed above, it is hard to come up with a secure password that you can remember. Fortunately, we have some trustworthy applications and services that can help you solve this problem.
For example, LastPass can sa
relational database. If the authentication information provided by the user is valid, the login action injects an object into the HttpSession object. If an injection object exists in HttpSession, it indicates that the user has logged on. For ease of understanding, only one user name is written into HttpSession to indicate that the user has logged on. Listing 1 illustrates the login action by extracting a piece of code from the loginAction. jsp page:
Listing 1//...// Initialize RequestDispatcher
security, then how to use "insecure AJAX" cannot weaken its security. Otherwise, if the application itself has vulnerabilities, no matter what technical request is used, it is insecure.
SQL Injection
SQL Injection expansion will also be a great learning, and it has been a very popular (of course, now...) for a long time. Here are just a few of the most extreme examples.
The premise is that the background does not filter the front-end input data; otherwise, it cannot take effect.
Assume that the
1. first install wvdialsudoapt-getinstallwvdial in Ubuntu8.04 if an exception occurs during the installation process, you need to reinstall it, may not match the previous version of the sudoapt-getautoremovewvdialsudoapt-getinstallwvdial2. view the installation status of sudowvdialconf3. the configuration file sudo/etc/wvdial.
1. First install wvdial in Ubuntu 8.04Sudo apt-get install wvdialIf an exception occurs during the installation process, you need to reinstall it, which may not match the
, one lower-case letter, one upper-case letter, and one special character.Risk Description:If a password is associated with a user, you must modify the business configuration file synchronously when changing the password. Otherwise, the business may become unavailable.Operation Method:Set Password rules: each character has at least one character from these character sets a-z, A-Z, punctuation, 0-9Modify the/etc/pam. d/passwd file:# Vi/etc/security/passwdMake sure that the following lines are not
to the database is active.The user can query the value of the connected property to determine the connection state of the database. If this property is true, the database is in a connected state; False, the current database connection is closed.4) ConnectionStringA string is used to specify connection information for the database. The standard caller of the hyphen string is: adoconnection1.connectionstring:= ' Provider=providerret; Remote Server=serverret ';Among them, the common parameters sup
The first thing to declare is that this article is purely an ignorant view of a little developer without foresight and knowledge, and is intended only for reference in Web system security.1, some superfluous wordsXPath injection and SQL injection, very similar in principleBut XPath injects objects primarily to XML, which is relatively more dangerous.2. Save XML for user informationroot>user>ID>1ID>username>Adminusername>password>123password>user>user>ID>5ID>username>Ffmusername>password>
. It is true that the password leak event does not cause too much loss. But there is a good saying, thief difficult to prevent. Think about how serious the consequences are if someone around you accidentally sees this information and takes a photo. After all, it takes just a few seconds to get this information.Method Three, with 1password software, although convenient, but the dependence of the device is relatively strong.Method Four, Practice yellow
phone:From a security standpoint, the most secure iphone in a common phone, the iphone requires the "fingerprint unlock" feature and the "Find My iphone" feature to open, and the security of the Apple ID password, with a unique secure password. If your phone is lost, sign in to the icloud website the first time, and turn on Lost mode on the Find my iphone so that no one else can use your phone (even if the brush is not working), and its minor calls to the operator to report a SIM card loss. In
save together.
Best practice: According to the @incNick said, and friends of the Alliance and other needs of the user name password site to talk about cooperation, let them give you a login API, you can recruit programmers to develop a unified authentication system
A not a way to use the QQ client to save the "password." Most of the domestic account system can be directly or indirectly tied to the QQ account. Direct: Indirect: Baidu webmaster The following is to solve the problem of
relational database. If the authentication information provided by the user is valid, the login action injects an object into the HttpSession object. If an injection object exists in HttpSession, it indicates that the user has logged on. For ease of understanding, only one user name is written into HttpSession to indicate that the user has logged on. Listing 1 illustrates the login action by extracting a piece of code from the loginAction. jsp page:
Listing 1//...// Initialize RequestDispatcher
1 to 3 for each SQL Server 2005 instance that requires remote access.Step 4: create an exception for "sqlbrowser" in Windows Firewall1. on the Windows Firewall settings page, select the "exceptions" tab and click "add program"2. In the add program window, click browse"3. Then find "C:/ProgramFiles/Microsoft files/Microsoft SQL Server/90/shared/sqlbrowser.exe ",Click OK to returnNote: the path may vary depending on SQL Server 2005 installation.Problem 2: The SA cannot be logged on. The solution
May 2012 15:45:58 GMTServer: Microsoft-Microsoft IIS/6.0X-powered-by: ASP. NETCache-ctrol: No-Cache
4e6BM? 6 ((? ? ? ? ? ? K? K
... A bunch of back-ends ........
Then, crack the obtained Verification Code image using the above method and obtain the verification code. At the same time, write the sessionid obtained above to the request parameter of the registered request header:
sprintf(postData,"name=helloworld%dsex=1password=123456repassword=123456
The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion;
products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the
content of the page makes you feel confusing, please write us an email, we will handle the problem
within 5 days after receiving your email.
If you find any instances of plagiarism from the community, please send an email to:
info-contact@alibabacloud.com
and provide relevant evidence. A staff member will contact you within 5 working days.