jforum | Down Home Country Coding With Scott Selikoff and Jeanne Boyarsky

fixing JForum XSS error in PM module with quotes

Jeanne Boyarsky — Sat, 24 May 2014 17:05:53 +0000

A member reported a XSS vulnerability in stock JForum 2.1.9. We confirmed it was a vulnerability/exposure on CodeRanch as well and fixed our fork. Luckily, it was an easy fix unlike the CSRF problems last year. In addition to saying how … Continue reading →

The post fixing JForum XSS error in PM module with quotes first appeared on Down Home Country Coding With Scott Selikoff and Jeanne Boyarsky.

fixing JForum XSS error in PM module with quotes was first posted on May 24, 2014 at 1:05 pm.
©2019 "Down Home Country Coding With Scott Selikoff and Jeanne Boyarsky". Use of this feed is for personal non-commercial use only. If you are not reading this article in your feed reader, then the site is guilty of copyright infringement. Please contact me at scott@selikoff.net

csrf for JForum without javascript

Jeanne Boyarsky — Sat, 23 Mar 2013 16:03:54 +0000

In February, I wrote a three part series on how we fixed JForum on coderanch to protect from CSRF. In included; Analysis Extending OWASP Problems Remaining problems Unfortunately, there were three remaining problems. Some mobile devices weren’t able to handle … Continue reading →

The post csrf for JForum without javascript first appeared on Down Home Country Coding With Scott Selikoff and Jeanne Boyarsky.

csrf for JForum without javascript was first posted on March 23, 2013 at 12:03 pm.
©2019 "Down Home Country Coding With Scott Selikoff and Jeanne Boyarsky". Use of this feed is for personal non-commercial use only. If you are not reading this article in your feed reader, then the site is guilty of copyright infringement. Please contact me at scott@selikoff.net

fixing csrf for jforum and csrf filter analysis (part 1)

Jeanne Boyarsky — Sat, 09 Feb 2013 15:50:01 +0000

This post goes through how we fixed CSRF (cross site request forgery) in JForum, issues encountered and approach. It is useful reading for anyone who needs to protect against CSRF on their website. Background Stock JForum has a number of … Continue reading →

The post fixing csrf for jforum and csrf filter analysis (part 1) first appeared on Down Home Country Coding With Scott Selikoff and Jeanne Boyarsky.

fixing csrf for jforum and csrf filter analysis (part 1) was first posted on February 9, 2013 at 10:50 am.
©2019 "Down Home Country Coding With Scott Selikoff and Jeanne Boyarsky". Use of this feed is for personal non-commercial use only. If you are not reading this article in your feed reader, then the site is guilty of copyright infringement. Please contact me at scott@selikoff.net

csrf – jforum cleanup and problems

Jeanne Boyarsky — Sat, 09 Feb 2013 15:47:26 +0000

See part 1 for how we got here and part 2 for how we changed the OWASP filter. Code cleanup and problems There is some poorly written code in JForum that CSRF now prevents from working. In these cases, I needed … Continue reading →

The post csrf – jforum cleanup and problems first appeared on Down Home Country Coding With Scott Selikoff and Jeanne Boyarsky.

csrf – jforum cleanup and problems was first posted on February 9, 2013 at 10:47 am.
©2019 "Down Home Country Coding With Scott Selikoff and Jeanne Boyarsky". Use of this feed is for personal non-commercial use only. If you are not reading this article in your feed reader, then the site is guilty of copyright infringement. Please contact me at scott@selikoff.net

csrf – extending the owasp solution and “interesting” IE javascript bugs (part 2)

Jeanne Boyarsky — Sat, 09 Feb 2013 15:34:59 +0000

While implementing CSRF for JForum, I needed to extend the OWASP solution. Let me tell you, they don’t make it easy to extend. Lots of final. Here’s what I did – linked to code on github. To read about the … Continue reading →

The post csrf – extending the owasp solution and “interesting” IE javascript bugs (part 2) first appeared on Down Home Country Coding With Scott Selikoff and Jeanne Boyarsky.

csrf – extending the owasp solution and “interesting” IE javascript bugs (part 2) was first posted on February 9, 2013 at 10:34 am.
©2019 "Down Home Country Coding With Scott Selikoff and Jeanne Boyarsky". Use of this feed is for personal non-commercial use only. If you are not reading this article in your feed reader, then the site is guilty of copyright infringement. Please contact me at scott@selikoff.net

postgres tuning – fixing a production problem

Jeanne Boyarsky — Sat, 22 Dec 2012 22:35:44 +0000

After a new feature was implemented (not by me), coderanch started crashing almost every day in the middle of the night. In a few days, I’ll be blogging about the troubleshooting process and how timezones helped. This post focuses on … Continue reading →

The post postgres tuning – fixing a production problem first appeared on Down Home Country Coding With Scott Selikoff and Jeanne Boyarsky.

postgres tuning – fixing a production problem was first posted on December 22, 2012 at 5:35 pm.
©2019 "Down Home Country Coding With Scott Selikoff and Jeanne Boyarsky". Use of this feed is for personal non-commercial use only. If you are not reading this article in your feed reader, then the site is guilty of copyright infringement. Please contact me at scott@selikoff.net

sql query optimization – why temp tables can help

Jeanne Boyarsky — Thu, 31 May 2012 02:02:57 +0000

Last month, I migrated the jforum.net forum data to a coderanch jforum forum. I had a requirement/goal to update the links in our forum so they work rather than point to the jforum broken links. First I created the mapping. … Continue reading →

The post sql query optimization – why temp tables can help first appeared on Down Home Country Coding With Scott Selikoff and Jeanne Boyarsky.

sql query optimization – why temp tables can help was first posted on May 30, 2012 at 10:02 pm.
©2019 "Down Home Country Coding With Scott Selikoff and Jeanne Boyarsky". Use of this feed is for personal non-commercial use only. If you are not reading this article in your feed reader, then the site is guilty of copyright infringement. Please contact me at scott@selikoff.net

TSS Symposium Preview – Throw Away All The Rules. Now What Process Do You Follow?

Jeanne Boyarsky — Fri, 18 Feb 2011 04:24:30 +0000

As previously mentioned, Scott and I are both be presenting talks at TheServerSide Java Symposium in March. In preparation for the conference, we are providing sneak peaks of talks this week on the blog. Scott gave a sneak preview of … Continue reading →

The post TSS Symposium Preview – Throw Away All The Rules. Now What Process Do You Follow? first appeared on Down Home Country Coding With Scott Selikoff and Jeanne Boyarsky.

TSS Symposium Preview – Throw Away All The Rules. Now What Process Do You Follow? was first posted on February 17, 2011 at 11:24 pm.
©2019 "Down Home Country Coding With Scott Selikoff and Jeanne Boyarsky". Use of this feed is for personal non-commercial use only. If you are not reading this article in your feed reader, then the site is guilty of copyright infringement. Please contact me at scott@selikoff.net

clone a postgresql database for testing cleanly

Jeanne Boyarsky — Mon, 29 Mar 2010 03:03:35 +0000

I’m looking at writing integration tests for the back end of JavaRanch‘s JForum install. A few “pesky” requirements/constraints Multiple developers all over the word have their own local test databases filled with data in different states. The tests must work … Continue reading →

The post clone a postgresql database for testing cleanly first appeared on Down Home Country Coding With Scott Selikoff and Jeanne Boyarsky.

clone a postgresql database for testing cleanly was first posted on March 28, 2010 at 11:03 pm.
©2019 "Down Home Country Coding With Scott Selikoff and Jeanne Boyarsky". Use of this feed is for personal non-commercial use only. If you are not reading this article in your feed reader, then the site is guilty of copyright infringement. Please contact me at scott@selikoff.net