[DVWA] Session ID introduction
The old draft has not been sent, and it has been sent out and saved in the blog. I haven't been in touch with security for a long time. I've been learning data structures and algorithms.
Introduction to Burpsuite sequencer
BurpSuite series (VII) -- Sequencer module (Sequencer) As a tool used to detect the randomness quality of data sample ...
Added by WilliamNz on Fri, 18 Feb 2022 21:05:53 +0200
Remember my login status implementation
In the website, the http request is stateless, that is, when user 1 connects to the server and logs in successfully, when refreshing the website and reconnecting, it still needs to log in again. Different users cannot be identified only through general information. The emergence of cookies is to solve this problem and realize the function of re ...
Added by hyperyoga on Mon, 31 Jan 2022 00:07:11 +0200
Spring Boot implementation consistency Session application instance
Initialize project
1. Create a new Spring Boot project, add web by default, and wait for the completion of the construction. After the completion, the directory structure is as follows:
.
├── HELP.md
├── login-session-demo.iml
├── mvnw
├── mvnw.cmd
├── pom.xml
├── src
│ ├── main
│ │ ├── java
│ │ ├── resources
│ │ └── webapp
│ ...
Added by anon_login_001 on Wed, 26 Jan 2022 21:30:09 +0200
Spring security - learning notes - concurrency control of session management: the same account is only allowed to log in on one device
scene
Take over an old project: Start with POM xml
...slightly
<dependency>
<groupId>org.springframework</groupId>
<artifactId>spring-webmvc</artifactId>
<version>4.2.4.RELEASE</version>
</dependency>
<dependency>
<groupId>org.springframework</groupId>
...
Added by bob2006 on Tue, 18 Jan 2022 21:23:02 +0200
CentOS 7 PHP7 Enable session extension
Configuration Guide: http://php.net/manual/zh/refs.basic.session.php http://php.net/manual/zh/session.configuration.php
Use the command:
php -i
Find the information for the printout session block
session
Session Support => enabled
Registered save handlers => files user
Registered serializer handlers => ph ...
Added by harlequeen on Fri, 10 Jul 2020 18:46:58 +0300
Three ways of querying hibernate
There are three main query modes common to hibernate: HQL, QBC (named query), and using native SQL query (SqlQuery)
HQL Query
* HQL (Hibernate Query Language) provides a rich and flexible way of querying, and using HQL for querying is also Hibernate's official recommended way of querying.
* HQL is very similar in syntax structure to ...
Added by schoi on Fri, 10 Jul 2020 18:19:06 +0300
[Spring] Pure java for Spring-hibernate integration
First import the corresponding jar package for Spring-hibernate
Then prepare the file for the database connectionHibernate.propertiesAlsoJdbc.properties
Hibernate.propertiesFile: Configure the hibernate dialect and automatic table building
hibernate.dialect=org.hibernate.dialect.H2Dialect
hibernate.hbm2ddl.auto=create
Jdbc.propertiesFi ...
Added by Master_Phantom on Wed, 08 Jul 2020 17:41:09 +0300
mybatis Series IV: Dynamic SQL
Dynamic SQL is a powerful feature of MyBatis.When using JDBC to manipulate data, concatenating conditions into SQL strings can be painful if there are too many query conditions. The usual solution is to write a lot of if-else conditional statements and strings to concatenate, and make sure you don't forget spaces or omit commas at the end of fi ...
Added by jaikar on Tue, 07 Jul 2020 18:08:09 +0300
ActiveMQ encoding implementation
1. ActiveMq coding implementation
Create a new maven project corresponding to pom.xml Some contents of the file are as follows. jdk is 1.8 and other configurations are generated automatically.
<dependencies>
<dependency>
<groupId>junit</groupId>
<artifactI ...
Added by IcedEarth on Wed, 24 Jun 2020 08:20:44 +0300
Authentication and authorization of spring security oauth2.0
In addition to oauth and shiro, we learn oauth 2.0 here
1.1
Authentication and authorization are two basic concepts to solve software system security. Authentication is to verify whether the user's identity is legal, and authorization is to verify whether the user has the authority to operate resou ...
Added by phpnwx on Sun, 21 Jun 2020 13:26:10 +0300