News for hackers. Stuff that matters.

A comment on I just discovered major security flaws in my web store. Parent comment

Re:I just discovered major security flaws in my web store by jivejones on Thursday July 28, 2011 @11:56AM (#2817404)
With PHP you can create the headers at the top of the page, with python you can create a 'script' that sends custom headers to a server, thus you could tell the server that its a image via the headers but it could be something different ie a script... Any good developer will look out for this stuff though.
[ Parent | on HN ]
Re:I just discovered major security flaws in my web store by tedunangst on Thursday July 28, 2011 @12:33PM (#2817581)
So how does the website get my browser to run a python script?

According to the article, this was supposed to work for normal users, not people hacking the server.

[ Parent | on HN ]
Re:I just discovered major security flaws in my web store by jivejones on Sunday July 31, 2011 @01:46PM (#2828957)
All I meant to say was that its easy to send custom headers to a server.

If you are using PHP:

http://php.net/manual/en/function.header.php

[ Parent | on HN ]