Book Mark

Ike.ninja

Linux Fun
  • Home
  • How to
  • Reference Links
  • Categories
    • Releases
    • Plesk
    • Community
    • CMS
    • security
    • MYSQL
    • cPanel
  • Tools
    • IP Checker
    • Byte Converter
RSS

[20180601] – Core – Local File Inclusion with PHP 5.3

Jun26
by Ike on June 26, 2018 at 1:30 pm
Posted In: CMS, Joomla, security, Security Centre
  • Project: Joomla!
  • SubProject: CMS
  • Impact: Low
  • Severity: Low
  • Versions: 2.5.0 through 3.8.8
  • Exploit type: LFI
  • Reported Date: 2018-April-23
  • Fixed Date: 2018-June-26
  • CVE Number: CVE-2018-12712

Description

Our autoload code checks classnames to be valid, using the “class_exists” function in PHP. In PHP 5.3 this function validates invalid names as valid, which can result in a Local File Inclusion.

Affected Installs

Joomla! CMS versions 2.5.0 through 3.8.8

Solution

Upgrade to version 3.8.9

Contact

The JSST at the Joomla! Security Centre.

Reported By: Davide Tampellini

└ Tags: Security Centre
 Comment 

Why coding standards matter

Jun26
by Ike on June 26, 2018 at 10:05 am
Posted In: coding standards, Developer Tips, Developers, Plesk, Releases, risk-free coding, Tips and easy-reading, web development

There’s nothing wrong with the need for speed in coding. However, if you lack coding standards, your products will become fragile and liable to break down in the future. Move fast and you’ll break things over and over. Let’s talk about why coding standards matter.

Life without coding standards

Why coding standards matter - Plesk - Move fast and break things

Facebook made the phrase “move fast and break things” famous. If you’re in startup mode, speed matters. After all, you’re painting a blank slate. If you never grow in your coding standards, how will that affect your product and team?

Think of your main product and how it evolved. Each month, you ship new features. Each quarter, you comb through bug reports. And then look for ideas to improve. Each developer on the team has their style. For instance, one developer may religiously use comments to describe what they’re doing. Another developer may use the “write drunk, edit sober” philosophy and focus on achieving quality through debugging. As a manager or team lead, it’s tough to stay organized and productive.

Widely differing code standards also hurt your team’s effectiveness and morale in subtle ways. Think about hiring new people to the team. How long will it take new hires to learn how your team codes? Without a clear commitment to a coding standard, the onboarding process will take longer. Furthermore, when people use different coding standards, debugging and testing become more difficult.

One way to solve the problem of slow product development and team tensions? Adopt a single coding standard for the team.

Introducing coding standards

Why coding standards matter - Plesk -Introducing coding standards - the checklist

What coding standards should you adopt for your company? Ask 10 developers, and you’ll get 11 answers. Rather than prescribe a solution for your company, we suggest reviewing the following options first. But a word of caution: It’s easy to go overboard with coding standards. A small number of rules or principles will go a long way.

The principles approach to coding standards

Rather than discussing specific technologies and providing samples, the principles approach goes a different way. For instance, think about the Manifesto for Agile Software Development. You can see that as a principles approach when it suggests: “Business people and developers must work together daily throughout the project.”

The main problem of this approach? Developing robust first principles takes some serious thinking! It’s not going to be an overnight process. The benefit is that your company will have broad ideas that can be applied to a variety of circumstances.

Issues to consider when creating coding standards:

  • Emphasize decision making values. Principles help guide how a developer approaches code. For example, the agile emphasis on close collaboration with the business helps you plan your daily coding work.
  • Prioritize the long term. A principles-based coding standard should be able to stand for two or three years without any changes.

The procedures approach: Coding standards with all the details

In other situations, it makes sense to push for detailed procedures. If your company has armies of developers and you are struggling to stay consistent, procedures may be a better approach.

  • Choose one focus language. Your company may use JavaScript, C#, and PHP. Covering all of these in your coding standards may not be practical.  For example, take a look at the Coding Standards for JavaScript.
  • Balance theory and practice. For procedures to be beneficial, state a broad principle (for example, write comments in clear English with minimal slang) and provide examples of good code.
  • Set a length limit. A 200-page coding standard document, even if valuable, won’t encourage developers to open the document.

 

Final coding standards tips

If you use the procedures approach to coding standards, appoint someone to own and maintain the standards. Otherwise, you may end up with an out of date document that provides little value.

Now based on those options, make some choices about what makes sense for your company. Balance your personal preferences with what your customers value. For instance, national defense customers will place a high value on security and internal control. If that’s what your customers want, then start building those points into your product.

The post Why coding standards matter appeared first on Plesk.

└ Tags: coding standards, Developer Tips, Developers, risk-free coding, Tips and easy-reading, web development
 Comment 

Fedora 28: podofo Security Update

Jun26
by Ike on June 26, 2018 at 9:58 am
Posted In: Other

(Jun 25) This update fixes multiple security vulnerabilities: CVE-2017-7380, CVE-2017-7381, CVE-2017-7382, CVE-2017-7383, CVE-2017-5852, CVE-2017-5853, CVE-2017-6844, CVE-2017-5854, CVE-2017-5855, CVE-2017-5886, CVE-2018-8000, CVE-2017-6840, CVE-2017-6842, CVE-2017-6843, CVE-2017-6845, CVE-2017-6847, CVE-2017-6848, CVE-2017-7378, CVE-2017-7379, CVE-2017-7994, CVE-2017-8054,

 Comment 

RedHat: RHSA-2018-1974:01 Moderate: java-1.7.1-ibm security update

Jun26
by Ike on June 26, 2018 at 9:46 am
Posted In: Other

(Jun 25) An update for java-1.7.1-ibm is now available for Red Hat Satellite 5.6 and Red Hat Satellite 5.7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which

 Comment 

RedHat: RHSA-2018-1975:01 Moderate: java-1.8.0-ibm security update

Jun26
by Ike on June 26, 2018 at 9:46 am
Posted In: Other

(Jun 25) An update for java-1.8.0-ibm is now available for Red Hat Satellite 5.8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from

 Comment 
  • Page 2,246 of 2,974
  • « First
  • «
  • 2,244
  • 2,245
  • 2,246
  • 2,247
  • 2,248
  • »
  • Last »

What’s New?

  • Ubuntu 18.04: USN-7907-5 Linux Kernel Important Security Flaws
  • Debian: Chromium Important DSA-6080-1 Code Exec DoS Issues
  • Fedora 42: SingularityCE Important Upgrade 4.3.5 – FEDORA-2025-54d78b9fed
  • Fedora 43: perl-Alien-Brotli Critical Security DoS Fix 2025-d93200cf16
  • Fedora 42: Wireshark 4.6.1 Critical Issue Advisory – FEDORA-2025-f810869906
  • Fedora 42: yarnpkg Command Injection Fix CVE-2025-64756 Advisory
  • Ubuntu 25.10: Linux Kernel Critical Flaws Security Patch USN-7906-3
  • Ubuntu 22.04: USN-7889-6 Linux Kernel Important Security Patch
  • Ubuntu 22.04 LTS: Linux Kernel Critical Security Issues USN-7928-3
  • Debian: Important DoS Vulnerabilities in FFmpeg DSA-6080-1 Advisory
  • Ubuntu 20.04 LTS: USN-7922-1 Linux Kernel Important Security Issues
  • Ubuntu 24.04 LTS: Kernel Important Security Fixes USN-7921-1 CVE-2025-39946
  • Debian: firefox-esr Critical Privilege Escalation DSA-6078-1 CVE-2025-14321
  • 2026 Global Partner Program Announcement
  • Debian: pdns-recursor Critical Denial of Service Vulnerability DSA-6077-1
  • Debian: libpng1.6 Critical Info Leak & DoS Vulnerabilities DSA-6076-1
  • Fedora 43: python3-docs Update 2025-e235793f10 – Maintenance Release
  • Fedora 43: python3.14 Critical Update Addresses Quadratic Complexity Bug
  • Debian: WordPress Important XSS and Info Disclosure DSA-6075-1
  • Ubuntu 22.04 LTS: fontTools Important Path Traversal Risk CVE-2025-66034
  • Debian: webkit2gtk Critical Info Exfiltration DSA-6074-1 CVE-2025-13947
  • Ubuntu 25.10: Radare2 Critical Memory Leak Security Advisory USN-7915-1
  • Fedora 41 ABRT Critical Command Injection Vulnerability Fix CVE-2025-12744
  • Fedora 42: mingw-libpng Important Heap Buffer Overflow Vuln 2025-9d0f04f316
  • Ubuntu: WebKitGTK High Remote Code Execution Threat USN-7914-1

Search

Translator

Tags

Business and industry code Community cPanel CVE Debian Debian Linux Distribution - Security Advisories Development Events Fedora Fedora Linux Distribution - Security Advisories General Hosting Important Advisory Linux Moderate Advisory Month in WordPress news Parallels Plesk Parallels Plesk Panel Performance PHP Plesk news and announcements Plesk Panel Podcast ProdDevSec Product and technology Products Project Release News Red Hat Red Hat Linux Distribution - Security Advisories Releases security Security Centre sensitive site Ubuntu Ubuntu Linux Distribution - Security Advisories update updates Various vulnerability Web Server Survey Wordpress wp-briefing

Posts

Helpful Links

  • Liquidweb.com
  • MYSQL Dev Documentation
  • Plugins
  • Source forge SED command
  • Themes
  • WordPress Documentation
  • You Tube
December 2025
M T W T F S S
« Nov    
1234567
891011121314
15161718192021
22232425262728
293031  
  • Google
  • Yahoo
  • Liquid Web
  • Storm
  • YouTube

©1999-2025 Ike.ninja | Powered by WordPress with Easel | Subscribe: RSS | Back to Top ↑

50 queries. 8.5 mb Memory usage. 0.450 seconds.