[B! Security][SQL] raimon49ã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

raimon49 id:raimon49

Securityã¨SQLã«é–¢ã™ã‚‹raimon49ã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (32)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

Cloudflare outage on November 18, 2025
This post is also available in ç®€ä½“ä¸æ–‡, FranÃ§ais, Deutsch, Italiano, æ—¥æœ¬èªž, í•œêµì–´, PortuguÃªs, EspaÃ±ol (LatinoamÃ©rica), EspaÃ±ol, Ð yÑÑÐºÐ¸Ð¹, Polski, Nederlands and ç¹é«”ä¸æ–‡. On 18 November 2025 at 11:20 UTC (all times in this blog are UTC), Cloudflare's network began experiencing significant failures to deliver core network traffic. This showed up to Internet users trying to access our customers' sites as an err
raimon49 2025/11/19
è‡ªå‹•ç”Ÿæˆã•ã‚Œã‚‹ãƒ•ã‚¡ã‚¤ãƒ«ã‚µã‚¤ã‚ºãŒæƒ³å®šå¤–ã«å¤§ãããªã£ãŸã“ã¨ãŒåŽŸå› ã§ã€ä¸ã®äººãŸã¡ã‚‚åˆæœŸå¯¾å¿œã§ã¯DDoSã‚’ç–‘ã„ãã®å¾Œæ ¹æœ¬åŽŸå› ã‚’çªãæ¢ã‚ã¦ãƒ•ã‚¡ã‚¤ãƒ«ã‚’ä»¥å‰ã®ãƒãƒ¼ã‚¸ãƒ§ãƒ³ã«ãƒãƒ¼ãƒ«ãƒãƒƒã‚¯ã€‚

CDN

DB

HTTP

Security

SQL

generator

memory

network

proxy
ãƒªãƒ³ã‚¯
Goã«ãŠã‘ã‚‹åž‹ã«ã‚ˆã£ã¦SQLã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³ã‚’é˜²ãæ–¹æ³•
ã¯ã˜ã‚ã« 2022å¹´ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ»ã‚ãƒ£ãƒ³ãƒ—å…¨å›½å¤§ä¼šã«è¬›å¸«ã¨ã—ã¦å‚åŠ ã—ã¾ã—ãŸã€‚ãã®éš›ã«ã€Goã«ãŠã‘ã‚‹è„†å¼±æ€§ã¸ã®å¯¾ç–ã¯ã©ã†ãªã£ã¦ã„ã‚‹ã®ã‹èª¿ã¹ã¾ã—ãŸã€‚ã“ã®è¨˜äº‹ã§ã¯ã€github.com/google/go-safeweb/safesqlãŒã©ã®ã‚ˆã†ã«SQLã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³ã‚’é˜²ã„ã§ã‚‹ã®ã‹ã«ã¤ã„ã¦è§£èª¬ã—ã¾ã™ã€‚ ãªãŠã€@rungã•ã‚“ã®æ–‡æ›¸ã‚’å¤šã„ã«å‚è€ƒã«ã—ã¦ãŠã‚Šã¾ã™ã€‚ã¾ãŸã€ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ»ã‚ãƒ£ãƒ³ãƒ—ã§ç”¨ã„ãŸè³‡æ–™ã¯ã“ã¡ã‚‰ã‹ã‚‰é–²è¦§ã§ãã¾ã™ã€‚ SQLã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³ã¨ã¯ï¼Ÿ ç‹¬ç«‹è¡Œæ”¿æ³•äººæƒ…å ±å‡¦ç†æŽ¨é€²æ©Ÿæ§‹ï¼ˆIPAï¼‰ãŒå…¬é–‹ã—ã¦ã„ã‚‹å®‰å…¨ãªã‚¦ã‚§ãƒ–ã‚µã‚¤ãƒˆã®ä½œã‚Šæ–¹ã‚’è¦‹ã‚‹ã¨ã€SQLã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³ã¯ä»¥ä¸‹ã®ã‚ˆã†ã«èª¬æ˜Žã•ã‚Œã¦ã„ã¾ã™ã€‚ ãƒ‡ãƒ¼ã‚¿ãƒ™ãƒ¼ã‚¹ã¨é€£æºã—ãŸã‚¦ã‚§ãƒ–ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã®å¤šãã¯ã€åˆ©ç”¨è€…ã‹ã‚‰ã®å…¥åŠ›æƒ…å ±ã‚’åŸºã«SQLæ–‡ï¼ˆãƒ‡ãƒ¼ã‚¿ãƒ™ãƒ¼ã‚¹ã¸ã®å‘½ä»¤æ–‡ï¼‰ã‚’çµ„ã¿ç«‹ã¦ã¦ã„ã¾ã™ã€‚ã“ã“ã§ã€SQLæ–‡ã®çµ„ã¿ç«‹ã¦æ–¹æ³•ã«å•é¡ŒãŒã‚ã‚‹å ´åˆã€æ”»æ’ƒã«ã‚ˆã£ã¦ãƒ‡ãƒ¼ã‚¿ãƒ™
raimon49 2022/08/13
Go

Google

Security

SQL

design

programming

study
ãƒªãƒ³ã‚¯
ãƒ¡ã‚¿ãƒƒãƒ—ã‚¹ãƒšã‚¤ãƒ¡ãƒ³ãƒˆã®æƒ…å ±æµå‡ºã«ã¤ã„ã¦ã¾ã¨ã‚ã¦ã¿ãŸ - piyolog
2022å¹´2æœˆ28æ—¥ã€ãƒ¡ã‚¿ãƒƒãƒ—ã‚¹ãƒšã‚¤ãƒ¡ãƒ³ãƒˆã¯æ±ºæ¸ˆæƒ…å ±ãªã©ãŒæ ¼ç´ã•ã‚ŒãŸãƒ‡ãƒ¼ã‚¿ãƒ™ãƒ¼ã‚¹ã¸ä¸æ£ã‚¢ã‚¯ã‚»ã‚¹ãŒè¡Œã‚ã‚Œã‚¯ãƒ¬ã‚¸ãƒƒãƒˆã‚«ãƒ¼ãƒ‰ã‚’å«ã‚€æƒ…å ±æµå‡ºãŒåˆ¤æ˜Žã—ãŸã¨å…¬è¡¨ã—ã¾ã—ãŸã€‚ã“ã“ã§ã¯é–¢é€£ã™ã‚‹æƒ…å ±ã‚’ã¾ã¨ã‚ã¾ã™ã€‚ è¤‡åˆçš„ãªæ”»æ’ƒã‚’åŠå¹´é–“å—ã‘ã‚‹ ä¸æ£åˆ©ç”¨æ‡¸å¿µã‚ã‚Šã¨é€£çµ¡ã‚’å—ã‘ãŸã®ã¯ãƒ¡ã‚¿ãƒƒãƒ—ã‚¹ãƒšã‚¤ãƒ¡ãƒ³ãƒˆã®ã‚¤ãƒ™ãƒ³ãƒˆãƒšã‚¤ã§2021å¹´12æœˆ17æ—¥ã«ã‚¯ãƒ¬ã‚¸ãƒƒãƒˆã‚«ãƒ¼ãƒ‰æ±ºæ¸ˆã‚’åœæ¢ã€‚ã•ã‚‰ã«ä¼šè²»ãƒšã‚¤ã‚’å«ã‚€3ã‚µã‚¤ãƒˆã¯2022å¹´1æœˆ5æ—¥ã¾ã§ã«ã‚¯ãƒ¬ã‚¸ãƒƒãƒˆã‚«ãƒ¼ãƒ‰ã®æ–°è¦æ±ºæ¸ˆã‚’åœæ¢ã€‚ãã®å¾Œ2022å¹´1æœˆ24æ—¥ã«ãƒãƒƒã‚¯ãƒ‰ã‚¢ã®å˜åœ¨ãŒç¢ºèªã•ã‚ŒãŸã“ã¨ã‹ã‚‰ã€ãƒˆãƒ¼ã‚¯ãƒ³æ–¹å¼ã®ã‚¯ãƒ¬ã‚¸ãƒƒãƒˆæ±ºæ¸ˆã‚µãƒ¼ãƒ“ã‚¹ã‚’å…¨ã¦åœæ¢ã—ãŸã€‚ æ”»æ’ƒã‚’å—ã‘ã¦ã„ãŸã®ã¯2021å¹´8æœˆ2æ—¥ã‹ã‚‰2022å¹´1æœˆ25æ—¥ã®ç´„6ã‚«æœˆã€‚2021å¹´12æœˆ14æ—¥ã«ã‚¯ãƒ¬ã‚¸ãƒƒãƒˆã‚«ãƒ¼ãƒ‰ä¼šç¤¾ã‹ã‚‰é€£çµ¡å—é ˜ã—ãã®å¾Œèª¿æŸ»ã™ã‚‹ã‚‚è‡ªç¤¾ã§ã®åŽŸå› ç‰¹å®šãŒã§ããšå¤–éƒ¨æ©Ÿé–¢ã§ãƒ•ã‚©ãƒ¬ãƒ³ã‚¸ãƒƒã‚¯èª¿æŸ»ã‚’å®Ÿæ–½ã€‚ ä¸æ£ã‚¢ã‚¯ã‚»ã‚¹ã¯ãƒ¡ã‚¿ãƒƒãƒ—ã‚¹ãƒšã‚¤ãƒ¡ãƒ³ãƒˆã®æ±º
raimon49 2022/03/04
Security

SQL

login

payment

privacy

ã‚¯ãƒ¬ã‚¸ãƒƒãƒˆã‚«ãƒ¼ãƒ‰

å¤§å…¬é–‹æ™‚ä»£
ãƒªãƒ³ã‚¯
ãƒ¡ã‚¿ãƒƒãƒ—ã‚¹ã€ãƒ†ã‚¯ãƒŽãƒã‚¸ãƒ¼ã§ä¸–ç•Œã‚’è§£ãæ”¾ã¤ã¯ãšãŒã‚¯ãƒ¬ã‚«æƒ…å ±æœ€å¤§46ä¸‡ä»¶ã‚’ä¸–ç•Œã«è§£ãæ”¾ã£ã¦ã—ã¾ã„ãŠè©«ã³ : å¸‚æ³ã‹ã¶å…¨åŠ›ï¼’éšŽå»º
æ—¥æœ¬ãƒ†ãƒ¬ãƒ“ã€Œ24æ™‚é–“ãƒ†ãƒ¬ãƒ“ã€ã€å¯„ä»˜é‡‘æ¨ªé ˜ã®æ—¥æœ¬æµ·ãƒ†ãƒ¬ãƒ“ãŒãŠé€šå¤œãƒ¢ãƒ¼ãƒ‰ã‹ã‚‰æ˜Žã‘ã‚‹ï¼ˆæ”¾é€çµ‚äº†æ™‚ã®å‹Ÿé‡‘é€Ÿå ±å€¤ã¯7å„„40ä¸‡8600å††ï¼‰
raimon49 2022/02/28
Security

Twitter

SQL

login

payment

privacy

venture

ã‚¯ãƒ¬ã‚¸ãƒƒãƒˆã‚«ãƒ¼ãƒ‰
ãƒªãƒ³ã‚¯
ãƒ¡ã‚¿ãƒƒãƒ—ã‚¹ã€ä¸æ£ã‚¢ã‚¯ã‚»ã‚¹ã‚„ã‚‰ã‚Œæ”¾é¡Œã€€æœ€å¤§46ä¸‡ä»¶ã®ã‚«ãƒ¼ãƒ‰ç•ªå·ã‚„ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚³ãƒ¼ãƒ‰æµå‡ºã‹ã€€ãƒãƒƒã‚¯ãƒ‰ã‚¢ã‚„SQLã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³ã®ç—•è·¡è¦‹ã¤ã‹ã‚‹
ã‚¯ãƒ¬ã‚¸ãƒƒãƒˆã‚«ãƒ¼ãƒ‰æ±ºæ¸ˆåŸºç›¤ã‚’æä¾›ã™ã‚‹ãƒ¡ã‚¿ãƒƒãƒ—ã‚¹ãƒšã‚¤ãƒ¡ãƒ³ãƒˆï¼ˆæ±äº¬éƒ½æ¸¯åŒºï¼‰ã¯2æœˆ28æ—¥ã€åŒç¤¾ã®ãƒ‡ãƒ¼ã‚¿ãƒ™ãƒ¼ã‚¹ã‹ã‚‰æœ€å¤§ã§46ä¸‡ä»¶ã®ã‚¯ãƒ¬ã‚¸ãƒƒãƒˆã‚«ãƒ¼ãƒ‰ç•ªå·ã€æœ‰åŠ¹æœŸé™ã€ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚³ãƒ¼ãƒ‰ãªã©ãŒæµå‡ºã—ãŸã¨ç™ºè¡¨ã—ãŸã€‚ã‚µãƒ¼ãƒã¸ã®ä¸æ£ãƒã‚°ã‚¤ãƒ³ã€SQLã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³ã€ãƒãƒƒã‚¯ãƒ‰ã‚¢ã®è¨ç½®ãªã©ã•ã¾ã–ã¾ãªæ”»æ’ƒã‚’å—ã‘ã¦ã„ãŸã“ã¨ãŒèª¿æŸ»ã§åˆ†ã‹ã£ãŸã€‚ æµå‡ºã—ãŸæã‚ŒãŒã‚ã‚‹ã®ã¯2021å¹´8æœˆ2æ—¥ã‹ã‚‰22å¹´1æœˆ25æ—¥ã¾ã§ã«æ±ºæ¸ˆã§ä½¿ã‚ã‚ŒãŸã‚¯ãƒ¬ã‚¸ãƒƒãƒˆã‚«ãƒ¼ãƒ‰ã®ç•ªå·ã€æœ‰åŠ¹æœŸé™ã€ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚³ãƒ¼ãƒ‰ãªã©46ä¸‡395ä»¶ã€21å¹´5æœˆ6æ—¥ã‹ã‚‰22å¹´1æœˆ25æ—¥ã¾ã§ã«å®Ÿè¡Œã•ã‚ŒãŸæ±ºæ¸ˆæƒ…å ±593ä»¶ã€åŠ ç›Ÿåº—æƒ…å ±38ä»¶ã€‚ã€Œå®Ÿéš›ã«æµå‡ºã—ãŸæƒ…å ±ã‚’ç‰¹å®šã§ããªã„ã€ï¼ˆãƒ¡ã‚¿ãƒƒãƒ—ã‚¹ãƒšã‚¤ãƒ¡ãƒ³ãƒˆï¼‰ãŸã‚ã€æ•°å€¤ã¯è€ƒãˆã‚‰ã‚Œã‚‹æœ€å¤§å€¤ã¨ã„ã†ã€‚ åŒç¤¾ã¯21å¹´12æœˆ14æ—¥ã«ã€ã‚µãƒ¼ãƒ“ã‚¹ã®ææºå…ˆã‹ã‚‰ã‚¯ãƒ¬ã‚¸ãƒƒãƒˆã‚«ãƒ¼ãƒ‰ã®ä¸æ£åˆ©ç”¨ãŒæ‡¸å¿µã•ã‚Œã¦ã„ã‚‹ã¨ã®é€£çµ¡ã‚’å—ã‘èª¿æŸ»ã‚’é–‹å§‹ã€‚22å¹´1æœˆä¸ã«ã€å¤–éƒ¨ã‹ã‚‰ãƒ‡ãƒ¼ã‚¿ãƒ™ãƒ¼
raimon49 2022/02/28
Security

SQL

login

payment

privacy

ã‚¯ãƒ¬ã‚¸ãƒƒãƒˆã‚«ãƒ¼ãƒ‰

å¤§å…¬é–‹æ™‚ä»£
ãƒªãƒ³ã‚¯
Node.jsã®MySQLãƒ‘ãƒƒã‚±ãƒ¼ã‚¸ã«ãŠã‘ã‚‹ã‚¨ã‚¹ã‚±ãƒ¼ãƒ—å‡¦ç†ã ã‘ã§ã¯é˜²ã’ãªã„ã€Œéš ã‚ŒãŸã€SQLã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³ - GMO Flatt Security Blog
â€»æœ¬è¨˜äº‹ã¯ç†è€…styprãŒè‹±èªžã§åŸ·ç†ã—ãŸè¨˜äº‹ã‚’æ ªå¼ä¼šç¤¾Flatt Securityç¤¾å†…ã§æ—¥æœ¬èªžã«ç¿»è¨³ã—ãŸã‚‚ã®ã«ãªã‚Šã¾ã™ã€‚ TL;DR Node.jsã®ã‚¨ã‚³ã‚·ã‚¹ãƒ†ãƒ ã§æœ€ã‚‚äººæ°—ã®ã‚ã‚‹MySQLãƒ‘ãƒƒã‚±ãƒ¼ã‚¸ã®ä¸€ã¤ã§ã‚ã‚‹ mysqljs/mysql (https://github.com/mysqljs/mysql)ã«ãŠã„ã¦ã€ã‚¯ã‚¨ãƒªã®ã‚¨ã‚¹ã‚±ãƒ¼ãƒ—é–¢æ•°ã®äºˆæœŸã›ã¬å‹•ä½œãŒSQLã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³ã‚’å¼•ãèµ·ã“ã™å¯èƒ½æ€§ãŒã‚ã‚‹ã“ã¨ãŒåˆ¤æ˜Žã—ã¾ã—ãŸã€‚ é€šå¸¸ã€ã‚¯ã‚¨ãƒªã®ã‚¨ã‚¹ã‚±ãƒ¼ãƒ—é–¢æ•°ã‚„ãƒ—ãƒ¬ãƒ¼ã‚¹ãƒ›ãƒ«ãƒ€ã¯SQLã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³ã‚’é˜²ãã“ã¨ãŒçŸ¥ã‚‰ã‚Œã¦ã„ã¾ã™ã€‚ã—ã‹ã—ã€mysqljs/mysql ã¯ã€å€¤ã®ç¨®é¡žã«ã‚ˆã£ã¦ã‚¨ã‚¹ã‚±ãƒ¼ãƒ—æ–¹æ³•ãŒç•°ãªã‚‹ã“ã¨ãŒçŸ¥ã‚‰ã‚Œã¦ãŠã‚Šã€æ”»æ’ƒè€…ãŒç•°ãªã‚‹å€¤ã®ç¨®é¡žã§ãƒ‘ãƒ©ãƒ¡ãƒ¼ã‚¿ã‚’æ¸¡ã™ã¨ã€æœ€çµ‚çš„ã«äºˆæœŸã›ã¬å‹•ä½œã‚’å¼•ãèµ·ã“ã™å¯èƒ½æ€§ãŒã‚ã‚Šã¾ã™ã€‚äºˆæœŸã›ã¬å‹•ä½œã¨ã¯ã€ãƒã‚°ã®ã‚ˆã†ãªå‹•ä½œã‚„SQLã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³ãªã©ã§ã™ã€‚ ã»ã¼ã™ã¹ã¦ã®ã‚ªãƒ³ãƒ©
raimon49 2022/02/16
JavaScript

JSON

MySQL

Security

SQL

node.js
ãƒªãƒ³ã‚¯
PHPã«ã¯ã‚¨ã‚¹ã‚±ãƒ¼ãƒ—é–¢æ•°ãŒä½•ç¨®é¡žã‚‚ã‚ã‚‹ã‘ã©ã€ã§ãã‚Œã°ã‚¨ã‚¹ã‚±ãƒ¼ãƒ—ã—ãªã„æ–¹æ³•ãŒè‰¯ã„ç†ç”±
ã“ã®ã‚¨ãƒ³ãƒˆãƒªã¯ã€PHP Advent Calendar 2021 ã®20æ—¥ç›®ã®ã‚¨ãƒ³ãƒˆãƒªã§ã™ã€‚19æ—¥ç›®ã¯ @takoba ã•ã‚“ã«ã‚ˆã‚‹Â PHP ãƒ—ãƒã‚¸ã‚§ã‚¯ãƒˆã®Composerãƒ‘ãƒƒã‚±ãƒ¼ã‚¸ã‚’Renovateã§å®šæœŸã‚¢ãƒƒãƒ—ãƒ‡ãƒ¼ãƒˆã™ã‚‹ ã§ã—ãŸã€‚ SQLã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³ã‚„ã‚¯ãƒã‚¹ã‚µã‚¤ãƒˆã‚¹ã‚¯ãƒªãƒ—ãƒ†ã‚£ãƒ³ã‚°(XSS)ã®å¯¾ç–ã‚’è¡Œã†éš›ã«ã¯ã€Œã‚¨ã‚¹ã‚±ãƒ¼ãƒ—å‡¦ç†ã€ã‚’ã—ã¾ã—ã‚‡ã†ã¨è¨€ã‚ã‚Œã¾ã™ãŒã€ãã®å‰²ã«PHPä»¥å¤–ã®è¨€èªžã§ã¯ã‚ã¾ã‚Šã‚¨ã‚¹ã‚±ãƒ¼ãƒ—å‡¦ç†ã®é–¢æ•°ãŒç”¨æ„ã•ã‚Œã¦ã„ãªã‹ã£ãŸã‚Šã—ã¾ã™ã€‚ãã‚Œã«æ¯”ã¹ã¦PHPã¯ã‚¨ã‚¹ã‚±ãƒ¼ãƒ—å‡¦ç†ã®é–¢æ•°ãŒéžå¸¸ã«è±Šå¯Œã§ã™ã€‚ã“ã‚Œã ã‘è¦‹ã¦ã‚‚ã€PHPã¯ãªã‚“ã¦ã‚»ã‚ãƒ¥ã‚¢ãªã‚“ã ! ã¨æ—©ã¨ã¡ã‚Šã™ã‚‹äººãŒã„ã‚‹ã‹ã‚‚ã—ã‚Œã¾ã›ã‚“ãŒã€ã—ã‹ã—ã€ä»–è¨€èªžã§ã‚¨ã‚¹ã‚±ãƒ¼ãƒ—å‡¦ç†é–¢æ•°ãŒã‚ã¾ã‚Šãªã„ã®ã¯ã¡ã‚ƒã‚“ã¨ç†ç”±ãŒã‚ã‚‹ã¨æ€ã†ã®ã§ã™ã€‚ æœ¬ç¨¿ã§ã¯ã€PHPã®ã‚¨ã‚¹ã‚±ãƒ¼ãƒ—å‡¦ç†ç”¨ã®é–¢æ•°ã‚’ç´¹ä»‹ã—ãªãŒã‚‰ã€ãã®åˆ©ç”¨ç›®çš„ã¨ã€ãã®é–¢æ•°ã‚’ä½¿ã‚ãªã„ã§æ¸ˆã¾ã›ã‚‹æ–¹æ³•ã‚’èª¬æ˜Žã—ã¾ã™ã€‚ SQLç”¨
raimon49 2021/12/21
ãã‚‚ãã‚‚ã‚¨ã‚¹ã‚±ãƒ¼ãƒ—é–¢æ•°ã®ä½¿ã„æ–¹ã‚’æ„è˜ã—ãªã‘ã‚Œã°ãªã‚‰ãªã„çŠ¶æ³ã‚’é¿ã‘ã‚‹ã€ã¨ã„ã†è©±ã€‚ãŸã—ã‹ã«ã€‚

Java

JavaScript

OS

PHP

Security

SQL

URI

guideline

programming

sh
ãƒªãƒ³ã‚¯
ã€Žä¾‹ãˆã°ã€PHPã‚’é¿ã‘ã‚‹ã€ä»¥é™PHPã¯ã©ã‚Œã ã‘å®‰å…¨ã«ãªã£ãŸã‹
ãªãœã€PHPã®mbstring.func_overloadã‚’deprecatedã«ã™ã‚‹ã®ã«5å¹´ã‹ã‹ã£ãŸã®ã‹? - æ…¢å¿ƒã€ç’°å¢ƒã®é•ã„
raimon49 2016/04/17
PHP 5.2.3ã‹ã‚‰ã®å¤‰é·ã€‚ä½•ãŒãƒ€ãƒ¡ã ã£ãŸã‹ã‚‰æ”¹å–„ã•ã‚ŒãŸã®ã‹æ›¸ã‹ã‚Œã¦ã„ã¦éžå¸¸ã«åˆ†ã‹ã‚Šæ˜“ã„ã€‚PHP 5.3.6ä»¥é™ã¯PDOã®æ–‡å—ã‚³ãƒ¼ãƒ‰æŒ‡å®šã‚’SET NAMESã§ãªãæŽ¥ç¶šæ™‚ã«æŒ‡å®šã§ãã‚‹ãã†ï¼ˆæ„è˜ã—ã¦ã„ãªã‹ã£ãŸï¼‰ã€‚

IPA

PHP

Security

SQL

guideline

æ´å²
ãƒªãƒ³ã‚¯
ã€Žæœ€åˆã«ã€Œèªã‚€ã€PHPã€ã¯å…¨ä½“çš„ã«ã¨ã¦ã‚‚è‰¯ã„ãŒæƒœã—ã„è„†å¼±æ€§ãŒã‚ã‚‹
æœ€åˆã«ã€Œèªã‚€ã€PHPï¼ˆã‚¯ã‚¸ãƒ©é£›è¡Œæœºï¼‰ã‚’èªã¿ã¾ã—ãŸã€‚æœ¬æ›¸ã«ã¯ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ç”¨èªžï¼ˆã‚¯ãƒã‚¹ã‚µã‚¤ãƒˆã‚¹ã‚¯ãƒªãƒ—ãƒ†ã‚£ãƒ³ã‚°ã€SQLã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³ç‰ï¼‰ã¯ã»ã¨ã‚“ã©å‡ºã¦ãã¾ã›ã‚“ãŒã€è„†å¼±æ€§ã«ã¤ã„ã¦ã‚ˆãé…æ…®ã•ã‚ŒãŸè¨˜è¿°ã¨ãªã£ã¦ã„ã¾ã™ã€‚ã—ã‹ã—ã€ãã®ç´°éƒ¨ã®è©°ã‚ãŒç”˜ãã€è„†å¼±æ€§ãŒæ··å…¥ã—ã¦ã—ã¾ã„ã¾ã—ãŸã€‚ãã®å†…å®¹ã‚’å ±å‘Šã—ãŸã„ã¨æ€ã„ã¾ã™ã€‚ ã‚¯ãƒã‚¹ã‚µã‚¤ãƒˆã‚¹ã‚¯ãƒªãƒ—ãƒ†ã‚£ãƒ³ã‚° å‡ºåŠ›æ™‚ã«HTMLã‚¨ã‚¹ã‚±ãƒ¼ãƒ—ã™ã‚‹ã¨ã„ã†åŽŸå‰‡ã‚’æ¯”è¼ƒçš„æ—©ã„æ®µéšŽã§èª¬æ˜Žã—ã¦ã„ã¾ã™ã€‚ãã®èª¬æ˜ŽãŒç´ æ™´ã‚‰ã—ã„ã¨æ€ã„ã¾ã—ãŸã€‚ ãƒ¦ãƒ¼ã‚¶ãƒ¼ã‹ã‚‰é€ä¿¡ã•ã‚ŒãŸãƒ‡ãƒ¼ã‚¿ã‚’ã€PHPã‚’ä½¿ã£ã¦ãã®ã¾ã¾ç”»é¢ã«è¡¨ç¤ºã™ã‚‹ã“ã¨ã¯ã€ãƒ¬ã‚¤ã‚¢ã‚¦ãƒˆã®å´©ã‚Œã‚„ ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ä¸Šã®å±é™ºã«ã¤ãªãŒã‚Šã¾ã™ã€‚å¿…ãšã€HTMLã«å¤‰æ›ã—ã¦ã‹ã‚‰è¡¨ç¤ºã—ã¾ã™ã€‚ãã“ã§ã€ç”»é¢ã«ã€Œ(^o^)<Helloã€ã¨è¡¨ç¤ºã™ã‚‹ãƒ—ãƒã‚°ãƒ©ãƒ ã‚’ä½œã£ã¦ã¿ã¾ã—ã‚‡ã†ã€‚ ã€ŒHTMLã«å¤‰æ›ã—ã¦ã€ã¨ã„ã†è¡¨ç¾ãŒã¨ã¦ã‚‚ã„ã„ã§ã™ãã€‚é›£ã—ãã„ã†ã¨ã€Content-Typeã‚’text/pl
raimon49 2015/06/11
å…¥é–€æ›¸ã¨ã—ã¦ã‹ãªã‚Šå¥½ã¾ã—ãã†ã€‚æ–°å…¥ç¤¾å“¡ãªã©ã«è–¦ã‚ã‚‹ä¸€å†Šã¨ã—ã¦è¦šãˆã¦ãŠããŸã„ã€‚

CodeReading

PHP

Security

SQL

XSS

book

review
ãƒªãƒ³ã‚¯
Time-based SQL Injectionã¯æ„å¤–ã«å®Ÿç”¨çš„ã ã£ãŸ
ã“ã®ã‚¨ãƒ³ãƒˆãƒªã§ã¯ã€Time-based SQLã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³ã€ã™ãªã‚ã¡æ™‚é–“å·®ã‚’åˆ©ç”¨ã—ãŸSQLã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³ãŒæ„å¤–ã«å®Ÿç”¨çš„ã ã£ãŸã¨ã„ã†å ±å‘Šã‚’ã—ã¾ã™ã€‚ãƒ‡ãƒ¢æ˜ åƒã‚ã‚Šã§ã™ã€‚ ã¯ã˜ã‚ã« Time-based SQL Injectionã¨ã„ã†æ”»æ’ƒãŒã‚ã‚Šã¾ã™ã€‚ã“ã‚Œã¯ãƒ–ãƒ©ã‚¤ãƒ³ãƒ‰SQLã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³ã®ä¸€ç¨®ã§ã€ã‚ã‚‹æ¡ä»¶ã®å ´åˆã«ä¸€å®šæ™‚é–“ï¼ˆä¾‹ãˆã°5ç§’ï¼‰ã‚¹ãƒªãƒ¼ãƒ—ã—ã€ãã†ã§ãªã„æ™‚ã¨ã®å¿œç”æ™‚é–“ã®å·®ã§æƒ…å ±ã‚’ç›—ã‚‚ã†ã¨ã„ã†ã‚‚ã®ã§ã™ã€‚1å›žã®HTTPãƒªã‚¯ã‚¨ã‚¹ãƒˆã§1ãƒ“ãƒƒãƒˆã®æƒ…å ±ãŒå¾—ã‚‰ã‚Œã‚‹ã®ã§ã€ãã‚Œã‚’ç©ã¿é‡ãã‚‹ã“ã¨ã«ã‚ˆã£ã¦ã€ã„ãã‚‰ã§ã‚‚æƒ…å ±ã‚’ç›—ã‚ã‚‹ã¯ãšã§ã™â€¦ç†è«–çš„ã«ã¯ã€‚ ã—ã‹ã—ã€ã€Œç†å±ˆã¯ãã†ã§ã‚‚ã€æ™‚é–“ãŒæŽ›ã‹ã‚Šã™ãŽã‚‹ã‚ˆãã€ã¨ã„ã†ã“ã¨ã§ã€æ·±ãã¯è¿½ã£ã‹ã‘ã¦ã„ã¾ã›ã‚“ã§ã—ãŸã€‚SQLã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³ã®æ¤œæŸ»ã«ã¯æœ‰åŠ¹ã§ã‚‚ã€æ‚ªç”¨ã¨ã—ã¦ã®å®Ÿç”¨æ€§ã¯ã‚ã¾ã‚Šãªã„ã¨è€ƒãˆã¦ã„ãŸã®ã§ã™ã€‚ ãã£ã‹ã‘ ãã£ã‹ã‘ã¯ã€ä»¥ä¸‹ã®Yahoo!çŸ¥æµè¢‹ã«ä»¥ä¸‹ã®è³ªå•ã§ã™ã€‚ SQL
raimon49 2015/04/16
sleep()ã§å½“ãŸã‚Šã‚’å¼•ã„ã¦ãƒ¡ãƒ¼ãƒ«ã‚¢ãƒ‰ãƒ¬ã‚¹ã¨ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã‚’æŽ¢ã—ã¦è¡Œãã€‚

MySQL

PHP

PostgreSQL

Security

SQL

algorithm

search

programming
ãƒªãƒ³ã‚¯
SQLã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³å¯¾ç–ã‚‚ã‚Œã®è²¬ä»»ã‚’é–‹ç™ºä¼šç¤¾ã«å•ã†åˆ¤æ±º
ãƒã‚¤ãƒ³ãƒˆã¯ä¸‹è¨˜ã®é€šã‚Šã§ã™ã€‚ Xç¤¾ï¼ˆåŽŸå‘Šï¼‰ã¯ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å¯¾ç–ã«ã¤ã„ã¦ç‰¹ã«æŒ‡ç¤ºã¯ã—ã¦ã„ãªã‹ã£ãŸ æå®³è³ å„Ÿã«ã¤ã„ã¦å€‹åˆ¥å¥‘ç´„ã«å®šã‚ã‚‹å¥‘ç´„é‡‘é¡ã®ç¯„å›²å†…ã¨ã™ã‚‹æå®³è³ å„Ÿè²¬ä»»åˆ¶é™ãŒã‚ã£ãŸ å½“åˆã‚·ã‚¹ãƒ†ãƒ ã¯ã‚«ãƒ¼ãƒ‰æ±ºæ¸ˆã‚’å¤–éƒ¨å§”è¨—ã—ç›´æŽ¥ã‚«ãƒ¼ãƒ‰æƒ…å ±ã‚’æ‰±ã£ã¦ã„ãªã‹ã£ãŸ Xç¤¾ãŒã€Œã‚«ãƒ¼ãƒ‰ä¼šç¤¾æ¯Žã®æ±ºæ¸ˆé‡‘é¡ã‚’çŸ¥ã‚ŠãŸã„ã€ã¨Yç¤¾ã«ä¾é ¼ã‚’ã—ã¦ã€ãã®çµæžœã‚«ãƒ¼ãƒ‰æƒ…å ±ã‚’ã„ã£ãŸã‚“DBã«ä¿å˜ã™ã‚‹ä»•æ§˜ã¨ãªã£ãŸï¼ˆ2010å¹´1æœˆ29æ—¥ï¼‰ Xç¤¾ã‹ã‚‰ã®å•ã„åˆã‚ã›ã«å¯¾ã—ã¦Yç¤¾ã¯ã€ã‚«ãƒ¼ãƒ‰æƒ…å ±ã‚’ä¿æŒã—ãªã„æ–¹å¼ã«å¤‰æ›´ã™ã‚‹ã“ã¨ãŒå¯èƒ½ã§ã€ãã®ã»ã†ãŒå®‰å…¨ã¨ãªã‚Šã€è²»ç”¨ã¯20ä¸‡å††ç¨‹åº¦ã§ã‚ã‚‹æ—¨ã‚’ä¼ãˆãŸï¼ˆ2010å¹´9æœˆ27æ—¥ï¼‰ãŒã€ãã®å¾ŒXç¤¾ã¯æ”¹è‰¯ã®æŒ‡ç¤ºã‚’ã—ãªã‹ã£ãŸ ä»¥ä¸‹ã®è„†å¼±æ€§ãã®ä»–ãŒèªã‚ã‚‰ã‚ŒãŸ ã‚·ã‚¹ãƒ†ãƒ ç®¡ç†æ©Ÿèƒ½ã®IDã¨ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ãŒ admin/password ã§ã‚ã£ãŸ å€‹äººæƒ…å ±ãŒè¨˜è¼‰ã•ã‚ŒãŸãŠå•ã„åˆã‚ã›ãƒã‚°ãƒ•ã‚¡ã‚¤ãƒ«ã®é–²è¦§ãŒå¯èƒ½ï¼ˆãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªãƒªã‚¹ãƒ†ã‚£ãƒ³ã‚°ã¨æ„å›³ã—ãªã„ãƒ•ã‚¡ã‚¤
raimon49 2015/01/22
ï¼žä»•æ§˜æ›¸ã«è¨˜è¼‰ã¯ãªã„ãŒSQLã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³å¯¾ç–ã‚’æ€ ã£ãŸã“ã¨ã¯é‡éŽå¤±ã§ã‚ã‚‹ / ç™ºæ³¨å´ã«ã¨ã£ã¦ã‚‚é–‹ç™ºå´ã«ã¨ã£ã¦ã‚‚ç”»æœŸçš„ãªå‰ä¾‹ã€‚

EC

Security

SQL

ã‚¯ãƒ¬ã‚¸ãƒƒãƒˆã‚«ãƒ¼ãƒ‰
ãƒªãƒ³ã‚¯
ãƒ”ã‚¯ã‚·ãƒ–ã§ã®é–‹ç™º - é‡‘é«ªã®ç¥žã‚¨ãƒ³ã‚¸ãƒ‹ã‚¢ã€kamipoã•ã‚“ã«é–‹ç™ºã®å…¨ã¦ã‚’æ•™ã‚ã£ãŸè©± | STORYS.JP äººç”Ÿç‰©èªž
çˆ†é€Ÿã§æˆé•·ã—ã¦ã„ãŸã€ãƒ™ãƒ³ãƒãƒ£ãƒ¼ä¼æ¥ãƒ”ã‚¯ã‚·ãƒ– é¢æŽ¥ã®æ™‚ã®è©±ã¯ã“ã¡ã‚‰=>ãƒ”ã‚¯ã‚·ãƒ–ã«å…¥ã‚‹ã¨ãã®è©± ãã‚“ãªè¨³ã§ã€ãƒ”ã‚¯ã‚·ãƒ–ã§ã‚¢ãƒ«ãƒã‚¤ãƒˆã¨ã—ã¦åƒãã“ã¨ã¨ãªã£ãŸç§ã¯ã€åˆå‡ºå‹¤ã®æ—¥ã‚’è¿ŽãˆãŸã€‚ ï¼ˆâ†‘ãƒ”ã‚¯ã‚·ãƒ–ã®ãƒ¦ãƒ‹ãƒ¼ã‚¯ãªã‚ªãƒ•ã‚£ã‚¹ï¼‰ ã»ã¼ä½•ã‚‚åˆ†ã‹ã‚‰ãšå§‹ã¾ã£ãŸé–‹ç™º ãƒ—ãƒã‚°ãƒ©ãƒŸãƒ³ã‚°ã‚¹ã‚ãƒ«ã¯ã»ã¼ç„¡ãã€ã‚„ã‚‹ã“ã¨ã‚‚æ±ºã¾ã£ã¦ã„ãªã‹ã£ãŸç§ã¯ã€æ—©é€Ÿé–‹ç™ºã®çµ±æ‹¬ã‚’ã—ã¦ã„ãŸCTOã®é’æœ¨ã•ã‚“ã‹ã‚‰ã®æŒ‡ç¤ºã‚’ä»°ã„ã ã€‚ ç§ã€Œé’æœ¨ã•ã‚“ã€ä½•ã‚’ã™ã‚Œã°è‰¯ã„ã§ã™ã‹ï¼Ÿã€ é’æœ¨ã•ã‚“ã€Œãã†ã ãã€œã¨ã‚Šã‚ãˆãšã“ã‚Œã®ãƒ¢ãƒã‚¤ãƒ«ç‰ˆã‚’ä½œã£ã¦æ¬²ã—ã„ãªã€œã€ ç§ã€Œåˆ†ã‹ã‚Šã¾ã—ãŸï¼ï¼ˆåˆ†ã‹ã£ã¦ãªã„ï¼‰ã€ é’æœ¨ã•ã‚“ã€ŒSubversionã®ã‚¢ã‚«ã‚¦ãƒ³ãƒˆç™ºè¡Œã—ã¨ãã‹ã‚‰ã€ã¾ãšã¯ç’°å¢ƒä½œã£ã¦ã¿ã¦ã€œã€ ç§ã€Œã¯ã„ï¼ï¼ˆåˆ†ã‹ã£ã¦ãªã„ï¼‰ã€ é’æœ¨ã•ã‚“ã€Œã‹ã¿ã½ã€œæºéƒ¨å›ã®ã‚¢ã‚«ã‚¦ãƒ³ãƒˆä½œã£ã¦ã‚ã’ã¦ã€œã€ kamipoã•ã‚“ã€Œã¯ã„ã€ ã“ã‚“ãªæ„Ÿã˜ã§ã€è©±ã¯é€²ã‚“ã§ã„ã£ãŸã€‚ ãã—ã¦ã€ç§ã¯æ—©é€Ÿå›°ã£ãŸã€‚ ã€ŒSubversionã£ã¦ä½•ã ã‚
raimon49 2014/02/19
ä¸€ã¤ä¸€ã¤ã®ã‚¨ãƒ”ã‚½ãƒ¼ãƒ‰ãŒå…·ä½“çš„ã§è‰¯ã„ã€‚æƒ…æ™¯ãŒæµ®ã‹ã¶ã€‚

CodeReview

PHP

Security

Subversion

SQL

Terminal

bash

pixiv

æ•™è‚²
ãƒªãƒ³ã‚¯
é–“é•ã„ã ã‚‰ã‘ã®SQLè˜åˆ¥åã‚¨ã‚¹ã‚±ãƒ¼ãƒ—
ã“ã‚Œã‹ã‚‰3å›žé€£è¼‰ã®äºˆå®šã§ã€SQLè˜åˆ¥åã®ã‚¨ã‚¹ã‚±ãƒ¼ãƒ—ã®å•é¡Œã«ã¤ã„ã¦è¨˜äº‹ã‚’æ›¸ãã¾ã™ã€‚SQLè˜åˆ¥åã®ã‚¨ã‚¹ã‚±ãƒ¼ãƒ—ã«ã¤ã„ã¦ã¯ã‚ã¾ã‚Šè§£èª¬è¨˜äº‹ãªã©ãŒãªãã€ã‚¨ãƒ³ã‚¸ãƒ‹ã‚¢é–“ã§ååˆ†ãªåˆæ„ãŒãªã„ã‚ˆã†ãªæ°—ãŒã—ã¾ã™ã®ã§ã€ã“ã‚Œã‚‰ã®è¨˜äº‹ãŒè°è«–ã®ãã£ã‹ã‘ã«ãªã‚Œã°å¹¸ã„ã§ã™ã€‚ 3å›žã®äºˆå®šã¯ä»¥ä¸‹ã®ã¨ãŠã‚Šã§ã™ã€‚ é–“é•ã„ã ã‚‰ã‘ã®SQLè˜åˆ¥åã‚¨ã‚¹ã‚±ãƒ¼ãƒ—(æœ¬ç¨¿) SQLè˜åˆ¥åã‚¨ã‚¹ã‚±ãƒ¼ãƒ—ã®ãƒã‚°ã®äº‹ä¾‹ SQLè˜åˆ¥åã¯çµå±€ã©ã†ã™ã‚Œã°ã‚ˆã„ã‹ ã¨ã„ã†ã“ã¨ã§ã€ã¾ãšã¯SQLè˜åˆ¥åã®ã‚¨ã‚¹ã‚±ãƒ¼ãƒ—ã®å¤±æ•—ä¾‹ã«ã¤ã„ã¦èª¬æ˜Žã—ã¾ã™ã€‚ã“ã®å¤±æ•—ä¾‹ã¯ã‚ãã¾ã§èª¬æ˜Žã®ãŸã‚ã«ä½œã£ãŸã‚‚ã®ã§ã€å®Ÿéš›ã®ã‚‚ã®ã§ã¯ã‚ã‚Šã¾ã›ã‚“ã€‚ã¾ãŸã€æƒ³å®šãŒã€Œã‚ã‚Šãˆãªã„ã€ã¨æ€ã‚ã‚Œã‚‹ã‹ã‚‚ã—ã‚Œã¾ã›ã‚“ãŒã€æ„å›³çš„ãªã‚‚ã®ã§ã™ã®ã§ã”å®¹èµ¦ã„ãŸã ã‘ã‚Œã°ã¨æ€ã„ã¾ã™ã€‚ã¾ãŸã€ã€Œé–“é•ã„ã ã‚‰ã‘ã®ã€ã¨ã„ã†ã‚¿ã‚¤ãƒˆãƒ«ã¯ã€ä»Šå›žã®é¡ŒæãŒé–“é•ã„ã ã‚‰ã‘ã¨ã„ã†æ„å‘³ã§ã‚ã‚Šã€å··ã®SQLå‘¼ã³å‡ºã—ãŒãã†ã§ã‚ã‚‹ã¨ã„ã†æ„å‘³ã§ã¯ã‚ã‚Šã¾ã›ã‚“ã€‚æœ¬ç¨¿ã«ç™»å ´ã™ã‚‹äººç‰©ã¨å›£
raimon49 2013/12/25
æ•™ç§‘æ›¸ã«å‡ºæ¥ãã†ã€‚

DB

PHP

Security

SQL

pattern

programming

study
ãƒªãƒ³ã‚¯
ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ãŒæ¼æ´©ã—ãªã„ã‚¦ã‚§ãƒ–ã‚¢ãƒ—ãƒªã®ä½œã‚Šæ–¹ ã€œ ã‚½ãƒ«ãƒˆã¤ããƒãƒƒã‚·ãƒ¥ã§æº€è¶³ã™ã‚‹å‰ã«è€ƒãˆã‚‹ã¹ãã“ã¨
â– â– åºè«– å¾³ä¸¸ã•ã‚“ã®ã‚¹ãƒ©ã‚¤ãƒ‰ã€Œã„ã¾ã•ã‚‰èžã‘ãªã„ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã®å–ã‚Šæ‰±ã„æ–¹ã€ã«è¦‹ã‚‰ã‚Œã‚‹ã‚ˆã†ã«ã€æ˜¨ä»Šã€ã‚¦ã‚§ãƒ–ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã®è¨è¨ˆè¦ä»¶ã¨ã—ã¦ã€ã‚µãƒ¼ãƒå†…ã«ä¾µå…¥ã•ã‚ŒãŸå ´åˆã§ã‚‚ãƒ¦ãƒ¼ã‚¶ãƒ¼ã®ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã‚’ã§ãã‚‹ã ã‘ä¿è·ã™ã¹ãã¨ã„ã†è«–èª¿ãŒè¦‹å—ã‘ã‚‰ã‚Œã‚‹ã‚ˆã†ã«ãªã£ã¦ãã¾ã—ãŸã€‚ ä¸ŠæŽ²ã®ã‚¹ãƒ©ã‚¤ãƒ‰ã§ã¯ã€ãã®æ‰‹æ³•ã¨ã—ã¦ã‚½ãƒ«ãƒˆã¤ããƒãƒƒã‚·ãƒ¥åŒ–ã‚’å‹§ã‚ã¦ã„ã¾ã™ã€‚ã—ã‹ã—ãªãŒã‚‰ã‚¹ãƒ©ã‚¤ãƒ‰ã«æ›¸ã‹ã‚Œã¦ã„ã‚‹ã¨ãŠã‚Šã€ã‚½ãƒ«ãƒˆã¤ããƒãƒƒã‚·ãƒ¥ã«ã¯ã€è¤‡é›‘ãªãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã®è§£èªã¯å›°é›£ã«ãªã‚‹ã‚‚ã®ã®ã€å˜ç´”ãªãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã‚’è¨å®šã—ã¦ã—ã¾ã£ã¦ã„ã‚‹ãƒ¦ãƒ¼ã‚¶ãƒ¼ã®ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã«ã¤ã„ã¦ã¯ååˆ†ãªä¿è·ã‚’æä¾›ã§ããªã„ã¨ã„ã†å•é¡ŒãŒã‚ã‚Šã¾ã™ã€‚ãã—ã¦ã€å¤šãã®ãƒ¦ãƒ¼ã‚¶ãƒ¼ã¯é©åˆ‡ãªãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰é‹ç”¨ãŒã§ããªã„ã€ã¨ã„ã†ã®ãŒæ‚²ã—ã„ç¾å®Ÿã§ã™ã€‚ ã‚½ãƒ«ãƒˆã¤ããƒãƒƒã‚·ãƒ¥ã‚’ä½¿ã£ãŸæ‰‹æ³•ã§ã“ã®ã‚ˆã†ãªå•é¡ŒãŒæ®‹ã‚‹ã®ã¯ã€ã‚¦ã‚§ãƒ–ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã‚µãƒ¼ãƒã«ä¾µå…¥ã—ãŸæ”»æ’ƒè€…ãŒãƒ¦ãƒ¼ã‚¶ãƒ¼ã®èªè¨¼æƒ…å ±ã‚’ãƒ€ã‚¦ãƒ³ãƒãƒ¼ãƒ‰ã—ã¦ã€èªè¨¼æƒ…å ±ã‚’ã‚ªãƒ•ãƒ©ã‚¤ãƒ³æ”»æ’ƒã™ã‚‹ã“
raimon49 2013/11/21
èªè¨¼ãƒã‚¸ãƒƒã‚¯ã‚’ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã‹ã‚‰åˆ†é›¢ã€‚

DB

Security

SQL

encryption

password
ãƒªãƒ³ã‚¯
è‡ªå·±æµã®SQLã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³å¯¾ç–ã¯å±é™º
HTMLã‚¨ã‚¹ã‚±ãƒ¼ãƒ—ã®å¯¾è±¡ã¨ãªã‚‹ < > & " ã®4æ–‡å—ã¯ã€æ–‡å—å®Ÿä½“å‚ç…§ã«å¤‰æ›ã•ã‚ŒãŸå¾Œã€preg_replaceé–¢æ•°ã§ã‚»ãƒŸã‚³ãƒãƒ³ã‚’å‰Šé™¤ã—ã¦ã—ã¾ã†ã®ã§ã€ä¸é€”åŠç«¯ãªå¦™ãªæ–‡å—åŒ–ã‘ã«ãªã‚Šãã†ã§ã™ã€‚ ä¸€èˆ¬çš„ãªåŽŸå‰‡ã¨ã—ã¦ã¯ã€ãƒ‡ãƒ¼ã‚¿ãƒ™ãƒ¼ã‚¹ã«ã¯HTMLã®å½¢ã§ã¯ãªããƒ—ãƒ¬ãƒ¼ãƒ³ãƒ†ã‚ã‚¹ãƒˆã®å½¢ã§ä¿å˜ã—ã¦ãŠãã€HTMLã¨ã—ã¦è¡¨ç¤ºã™ã‚‹ç›´å‰ã«HTMLã‚¨ã‚¹ã‚±ãƒ¼ãƒ—ã™ã‚‹æ–¹æ³•ã§çµ±ä¸€ã™ã‚‹ã“ã¨ã§ã€ä¸Šè¨˜ã®ã‚ˆã†ãªæ–‡å—åŒ–ã‘ã‚„ã‚¨ã‚¹ã‚±ãƒ¼ãƒ—æ¼ã‚Œã‚’ãªãã™ã“ã¨ãŒã‚ˆã„ã§ã—ã‚‡ã†ã€‚ è„†å¼±æ€§ã¯ãªã„ã®ã‹ ã“ã®sanitizeé–¢æ•°ã«è„†å¼±æ€§ã¯ãªã„ã§ã—ã‚‡ã†ã‹ã€‚ä¸Šè¡¨ã®ã‚ˆã†ã«ã€ãƒãƒƒã‚¯ã‚¹ãƒ©ãƒƒã‚·ãƒ¥ï¼ˆå††è¨˜å·ï¼‰ã‚’ç´ é€šã—ã—ã¦ã„ã‚‹ã®ã§ã€MySQLã‚„ã€è¨å®šã«ã‚ˆã£ã¦ã¯PostgreSQLã®å ´åˆã«ã€å•é¡ŒãŒç”Ÿã˜ãã†ã§ã™ã€‚ä»¥ä¸‹ã€ãã‚Œã‚’èª¬æ˜Žã—ã¾ã™ã€‚ä»¥ä¸‹ã®èª¬æ˜Žã§ã¯ã€MySQLã‚’ä½¿ã†æƒ³å®šã¨ã—ã¾ã™ã€‚ ä»¥ä¸‹ã®ã‚ˆã†ã«ã€ãƒã‚°ã‚¤ãƒ³å‡¦ç†ã‚’æƒ³å®šã—ãŸSQLæ–‡çµ„ç«‹ãŒã‚ã£ãŸã¨ã—ã¾ã™ã€‚ $sql = sprintf(
raimon49 2013/02/23
CodeReview

PHP

Security

SQL
ãƒªãƒ³ã‚¯
ç±³ãƒ¤ãƒ•ãƒ¼ã®ã‚µãƒ¼ãƒ“ã‚¹ã€ãƒã‚°ã‚¤ãƒ³æƒ…å ±45ä¸‡ä»¶ãŒæ¼ãˆã„ã‹
ç±³YahooãŒã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ä¾µå®³ã®çŠ ç‰²ã¨ãªã‚Šã€40ä¸‡ä»¶ã‚’è¶…ãˆã‚‹ãƒã‚°ã‚¤ãƒ³èªè¨¼æƒ…å ±ãŒæ¼ãˆã„ã™ã‚‹çµæžœã¨ãªã£ãŸã‚ˆã†ã ã€‚ ãƒãƒƒã‚ãƒ³ã‚°ã•ã‚ŒãŸãƒ‡ãƒ¼ã‚¿ã¯ãƒãƒƒã‚«ãƒ¼ã‚µã‚¤ãƒˆã€ŒD33D Companyã€ã«æŠ•ç¨¿ã•ã‚ŒãŸã€‚åŒãƒ‡ãƒ¼ã‚¿ã¯ã€45ä¸‡3000ä»¶è¶…ã®ãƒã‚°ã‚¤ãƒ³èªè¨¼æƒ…å ±ã‚’å«ã‚“ã§ãŠã‚Šã€Yahooã®ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ã‹ã‚‰å–å¾—ã•ã‚ŒãŸã‚‚ã®ã¨ã¿ã‚‰ã‚Œã‚‹ã€‚ãƒãƒƒã‚«ãƒ¼ã‚‰ã¯UNIONãƒ™ãƒ¼ã‚¹ã®SQLã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³æŠ€è¡“ã‚’ä½¿ã£ã¦Yahooã®ã‚µãƒ–ãƒ‰ãƒ¡ã‚¤ãƒ³ã«é€²å…¥ã—ãŸã¨è¿°ã¹ã€ã“ã®ãƒ‡ãƒ¼ã‚¿ãƒ€ãƒ³ãƒ—ã¯ã€Œè¦é˜ã€ã®ã¤ã‚‚ã‚Šã ã¨ã—ã¦ã„ã‚‹ã€‚ ãƒãƒƒã‚«ãƒ¼ã‚‰ã¯ã€Œã“ã®ã‚µãƒ–ãƒ‰ãƒ¡ã‚¤ãƒ³ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ç®¡ç†ã‚’æ‹…å½“ã—ã¦ã„ã‚‹é–¢ä¿‚è€…ã«ã¯ã€ã“ã‚Œã‚’è„…è¿«ã§ã¯ãªãè¦é˜ã¨ã—ã¦ã¨ã‚‰ãˆã¦ã»ã—ã„ã€ã¨ãƒ‡ãƒ¼ã‚¿ã®æœ«å°¾ã«ã‚³ãƒ¡ãƒ³ãƒˆã¨ã—ã¦è¨˜ã—ã¦ã„ã‚‹ã€‚ã€ŒYahooãŒæ‰€æœ‰ã™ã‚‹ã‚¦ã‚§ãƒ–ã‚µãƒ¼ãƒã«ã¯æ‚ªç”¨å¯èƒ½ãªã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ›ãƒ¼ãƒ«ãŒå¤šãã‚ã‚Šã€ã“ã‚Œã‚‰ã¯ã‚ã‚Œã‚ã‚Œã®ãƒ‡ãƒ¼ã‚¿å…¬é–‹ã‚ˆã‚Šã‚‚ã¯ã‚‹ã‹ã«å¤§ããªæå¤±ã‚’ç”Ÿã¿å‡ºã—ã¦ã„ã‚‹ã€‚è»½ãè€ƒãˆãªã„ã§ã»ã—ã„ã€‚ã“ã®ã‚µãƒ–
raimon49 2012/07/13
UNIONãƒ™ãƒ¼ã‚¹ã®SQLã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³

DB

Security

SQL

Yahoo
ãƒªãƒ³ã‚¯
5åˆ†ã§ã§ãã‚‹PHPã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å¯¾ç– - ã¼ãã¯ã¾ã¡ã¡ã‚ƒã‚“ï¼
ã“ã‚“ã«ã¡ã¯ã“ã‚“ã«ã¡ã¯ï¼ï¼ Webãƒ—ãƒã‚°ãƒ©ãƒŸãƒ³ã‚°ã—ã¦ã¾ã™ã‹ï¼ ã‚ˆãã€ŒPHPã¯ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãŒãƒ€ãƒ¡ã€ã¨ã‹è¨€ã‚ã‚Œã¦ã‚‹ã‚ˆãã€‚ ã§ã‚‚ãã‚Œã£ã¦ã€ã¹ã¤ã«PHPãŒæ‚ªã„ã‚“ã˜ã‚ƒãªãã¦ã€ ãŸã¶ã‚“ã€ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã¨ã‹ãŒã€ã¾ã ã‚ˆãã‚ã‹ã‚‰ãªã„äººãŒå¤šã„ã ã‘ãªã‚“ã˜ã‚ƒãªã„ã‹ãªã€‚ ãŒã‚“ã°ã£ã¦å‹‰å¼·ã—ã‚ˆã†ã¨æ€ã£ã¦ã‚‚ã€ãªã‚“ã ã‹é›£ã—ã„ç†å±ˆãŒä¸¦ã‚“ã§ã„ãŸã‚Šã™ã‚‹ã—ãâ€¦ã€‚ ãªã®ã§ä»Šæ—¥ã¯ã€ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å¯¾ç–ã«ã¤ã„ã¦ã€ ã€Œã“ã‚Œã ã‘ã‚„ã£ã¨ã‘ã°ã€ã‚ã‚Šã¨å®‰å…¨ã«ãªã‚‹ã‚ˆã€ã£ã¦ã“ã¨ã‚’ã€åˆå¿ƒè€…ã‚€ã‘ã«ã€å¤§é›‘æŠŠã«æ›¸ã„ã¦ã¿ã¾ã™ï¼ ç†å±ˆãŒã‚ã‹ã‚‰ãªãã¦ã‚‚ã€æœ€åˆã¯ã‚³ãƒ”ãƒšã§ã‚‚ã€ ãªã«ã‚‚ã‚„ã‚‰ãªã„ã‚ˆã‚Šã€ã‚„ã£ãŸã»ã†ãŒãã£ã¨ãƒžã‚·ã«ãªã‚‹ï¼ 1. XSSå¯¾ç– å‹•çš„ãªã‚‚ã®ã‚’è¡¨ç¤ºã™ã‚‹ã¨ãã€å…¨éƒ¨ã‚¨ã‚¹ã‚±ãƒ¼ãƒ—ã™ã‚Œã°okã§ã™ï¼ (NG) ã‚ãªãŸã®åå‰ã¯ <?= $name ?> ã§ã™ãï¼ â†“ (OK) ã‚ãªãŸã®åå‰ã¯ <?= htmlspecialchars($name, ENT_QUOTES) ?>
raimon49 2012/02/16
X-FRAME-OPTIONSãƒ˜ãƒƒãƒ€ã‹ãã€‚

CSRF

HTTP

PHP

Security

SQL

XSS

browser

crossdomain

study
ãƒªãƒ³ã‚¯
å¦¥å½“æ€§ã¨ã¯ä»•æ§˜ã®æ‰€ä½œ - SQLã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³å¯¾ç–ã¨ãƒãƒªãƒ‡ãƒ¼ã‚·ãƒ§ãƒ³ - ï¼Šã€Œãµã£ã‹ã¤ã®ã˜ã‚…ã‚‚ã‚“ãŒã¡ãŒã„ã¾ã™ã€‚ã€withã¬ã“
ç¹°ã‚Šè¿”ã—ã«ãªã‚Šã¾ã™ãŒã€å¦¥å½“æ€§æ¤œè¨¼ã¯ä»•æ§˜ã®å•é¡Œã§ã‚ã£ã¦ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å¯¾ç–ã§ã¯ã‚ã‚Šã¾ã›ã‚“ã€‚ ãƒãƒªãƒ‡ãƒ¼ã‚·ãƒ§ãƒ³ã¯ä»•æ§˜ã®å•é¡Œã§ã‚ã£ã¦ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å¯¾ç–ã§ã¯ãªã„ã¨ã¯ã©ã†ã„ã†ã“ã¨ã‹èª¬æ˜Žã—ã¾ã™ã€‚SQLã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³ã®å¯¾ç–ã¯ã€1. SQLã‚’æ–‡å—åˆ—çµåˆã§ä½œã‚‰ãªã„ 2. ãƒ—ãƒ¬ãƒ¼ã‚¹ãƒ›ãƒ«ãƒ€ã‚’ä½¿ã† ã§ã™ã€‚ãƒãƒªãƒ‡ãƒ¼ã‚·ãƒ§ãƒ³ã¯é–¢ä¿‚ã‚ã‚Šã¾ã›ã‚“ã€‚ ç°¡å˜ãªä¾‹ Webã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã§éƒµä¾¿ç•ªå·ã‚’æŒ‡å®šã™ã‚‹ãƒ•ã‚©ãƒ¼ãƒ ã‚’è€ƒãˆã¾ã—ã‚‡ã†ã€‚ æ—¥æœ¬ã®éƒµä¾¿ç•ªå·ã‚’æŒ‡å®šã™ã‚‹ãƒ•ã‚©ãƒ¼ãƒ ã®è¨è¨ˆã§ã‚ˆãè¦‹ã‚‹ã‚‚ã®ã¯å¤§ããåˆ†ã‘ã¦2é€šã‚Šã‚ã‚Šã€ä¸Š3æ¡ã¨ä¸‹4æ¡ã‚’åˆ¥ã€…ã«å…¥åŠ›ã•ã›ã‚‹ã‚‚ã®ã¨ã€1ã¤ã®ãƒ•ã‚©ãƒ¼ãƒ ã«ã¾ã¨ã‚ã¦å…¥åŠ›ã•ã›ã‚‹ã‚‚ã®ã§ã™ã€‚ä½æ‰€ã‹ã‚‰è£œå®Œã•ã›ã‚‹è¨è¨ˆã‚‚ã‚ã‚Šãˆã¾ã™ãŒã“ã“ã§ã¯ãŠã„ã¦ãŠãã¾ã™ã€‚ <input type="text" name="postal_code_1"> - <input type="text" name="postal_code_2"> <input typ
raimon49 2011/12/28
ï¼žã“ã®å…¥åŠ›ã«ã¯SQLã‚„HTMLã¨ã—ã¦ç‰¹åˆ¥ãªæ„å‘³ã‚’æŒã¤æ–‡å—ãŒå«ã¾ã‚Œã¦ã„ã¾ã™ãŒã€ãã‚‚ãã‚‚RDBMSã¨ã®ã‚„ã‚Šå–ã‚Šã§é©åˆ‡ã«ãƒ—ãƒ¬ãƒ¼ã‚¹ãƒ›ãƒ«ãƒ€ã‚’ä½¿ç”¨ã—ã¦ã„ãŸã‚Šã€HTMLã¨ã—ã¦å‡ºåŠ›ã™ã‚‹ç›´å‰ã«HTMLã¨ã—ã¦ç‰¹åˆ¥ãªæ„å‘³ã‚’æŒã¤æ–‡å—ã‚’é©åˆ‡ã«ã‚¨ã‚¹ã‚±ãƒ¼ãƒ—

HTML

SQL

Security
ãƒªãƒ³ã‚¯
ä»Šæ—¥ã“ãã‚ã‹ã‚‹ã€å®‰å…¨ãªWebã‚¢ãƒ—ãƒªã®ä½œã‚Šæ–¹2010
Internet Week 2010 S3 ä»Šæ—¥ã“ãã‚ã‹ã‚‹ã€å®‰å…¨ãªWebã‚¢ãƒ—ãƒªã®ä½œã‚Šæ–¹2010 http://www.nic.ad.jp/iw2010/program/s3/
raimon49 2011/10/21
2011å¹´ç¾åœ¨Webã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£è¦ä»¶ã²ã¨å·¡ã‚Šã€‚å…¥åŠ›å€¤æ¤œè¨¼ã§ã¯ä¿é™ºçš„ã«åˆ¶å¾¡æ–‡å—ã‚’å¼¾ã‘, SQLã®å‘¼ã³å‡ºã—ã«ã¯ã¨ã«ã‹ããƒ—ãƒ¬ãƒ¼ã‚¹ãƒ›ãƒ«ãƒ€ä½¿ãˆ, ãƒ¢ãƒã‚¤ãƒ«ã§ã¯ã‹ã‚“ãŸã‚“ãƒã‚°ã‚¤ãƒ³ã‚„ã‚ã‚ã€€ç‰ã€‚

Security

study

SQL

cookie

mobile

browser

iPhone

Android

ã‚ã¨ã§èªã‚“ã
ãƒªãƒ³ã‚¯
å¾³ä¸¸æœ¬ã®ã‚ã‚Œã“ã‚Œã‚’å®Ÿè·µã—ã¦ã¿ã¦æ°—ä»˜ã„ãŸã“ã¨ | æ°´ç„¡æœˆã°ã‘ã‚‰ã®ãˆã³æ—¥è¨˜
æ›´æ–°: 2011å¹´7æœˆ9æ—¥23æ™‚0åˆ†é ƒ ã¨ã‚ã‚‹ã‚·ã‚¹ãƒ†ãƒ ã§å¾³ä¸¸æœ¬ã®ã‚¹ãƒˆãƒ¬ãƒƒãƒãƒ³ã‚°ã‚’æŽ¡ç”¨ã™ã‚‹ã“ã¨ã«ã—ãŸã¨ã„ã†è©±ãŒã‚ã‚Šã¾ã—ãŸãŒã€ãã®å®Ÿè£…ãŒä½³å¢ƒã«å…¥ã£ã¦ãã¾ã—ãŸã€‚ç§ã¯æŒ‡ç¤ºã ã‘å‡ºã—ã¦ã€å®Ÿè£…ã¯ãŠä»»ã›â€¦â€¦ã¨æ€ã£ã¦ã„ãŸã®ã§ã™ãŒã€åŸºæœ¬çš„ãªéƒ¨åˆ†ã‚’ä½œã£ã¦ã‚‚ã‚‰ã£ãŸã¨ã“ã‚ã§ãƒãƒˆãƒ³ã‚¿ãƒƒãƒã•ã‚Œã€ç§ãŒå¼•ãç¶™ãå½¢ã§å®Ÿéš›ã«ã‚³ãƒ¼ãƒ‰ã‚’æ›¸ãã“ã¨ã«ãªã‚Šã¾ã—ãŸã€‚ åŸºæœ¬çš„ã«ã¯å¾³ä¸¸æœ¬ (www.amazon.co.jp)ã®ã‚ªã‚¹ã‚¹ãƒ¡ã©ãŠã‚Šã®å®Ÿè£…ã«ã™ã‚‹ã¨ã„ã†æ–¹é‡ãªã®ã§ã™ãŒã€å®Ÿéš›ã«ã‚³ãƒ¼ãƒ‰ã‚’æ›¸ã„ã¦ã¿ã‚‹ã¨ã€ã„ã‚ã„ã‚ã¨æ°—ã«ãªã£ãŸã‚Šè¿·ã£ãŸã‚Šã—ãŸäº‹ã‚‚å‡ºã¦ãã¾ã—ãŸã€‚ãã®ã‚ãŸã‚Šã‚’ç°¡å˜ã«ãƒ¡ãƒ¢ã—ã¦ãŠãã¾ã™ã€‚ â€»ã¡ãªã¿ã«ã€ã“ã®ã‚·ã‚¹ãƒ†ãƒ ã¯Ruby1.9.2 + Ruby on Rails3ã§ã®å®Ÿè£…ãªã®ã§ã€PHPã®ã‚³ãƒ¼ãƒ‰ã‚µãƒ³ãƒ—ãƒ«ã‚’ãã®ã¾ã¾ä½¿ã£ã¦ã„ã‚‹ã‚ã‘ã§ã¯ã‚ã‚Šã¾ã›ã‚“ã€‚ ã‚¹ãƒˆãƒ¬ãƒƒãƒå›žæ•°ã‚’ã©ã†æ±ºã‚ã‚‹ã®ã‹å¾³ä¸¸æœ¬327ãƒšãƒ¼ã‚¸ã«ã‚ã‚‹ã‚³ãƒ¼ãƒ‰ä¾‹ã‚’å‚è€ƒã«ã—ã¦å®Ÿè£…ã€‚ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã”ã¨
raimon49 2011/06/27
è¨ˆç®—é‡ã¨è¨ˆç®—å›žæ•°ã®èª¿æ•´ã€‚ãƒã‚°ã‚¤ãƒ³å¤±æ•—ã®å¿œç”æ™‚é–“ã‚‚è€ƒæ…®ã™ã‚‹ã€‚

DB

Security

SQL

cookie

encryption

password

Rails

ã‚ã¨ã§èªã‚“ã
ãƒªãƒ³ã‚¯
1 2 æ¬¡ã®ãƒšãƒ¼ã‚¸