[nycphp-talk] IIS server exploit with malicious js injection spawned during PHP Security Seminar
Daniel Convissor
danielc at analysisandsolutions.com
Fri Jun 25 12:45:46 EDT 2004
On Fri, Jun 25, 2004 at 12:40:55PM -0400, inforequest wrote:
>
> learn that a server exploit has injected malicious js code into footers
> of website pages, with the js designed to exploit an M$ IE flaw,
> secretely downloading the Scob trojan
And people wonder why I keep JavaScrap turned off...
--Dan
--
T H E A N A L Y S I S A N D S O L U T I O N S C O M P A N Y
data intensive web and database programming
http://www.AnalysisAndSolutions.com/
4015 7th Ave #4, Brooklyn NY 11232 v: 718-854-0335 f: 718-854-0409
>From hans not junk at nyphp.com Fri Jun 25 12:46:01 2004
Return-Path: <hans not junk at nyphp.com>
Received: from smtp11.intermedia.net (smtp11.intermedia.net [64.78.21.10])
by virtu.nyphp.org (Postfix) with ESMTP id 275A9A8771
for <talk at lists.nyphp.org>; Fri, 25 Jun 2004 12:46:01 -0400 (EDT)
Received: from ehost011-1.intermedia.net ([64.78.21.3]) by
smtp11.intermedia.net with Microsoft SMTPSVC(6.0.3790.0);
Fri, 25 Jun 2004 09:38:01 -0700
X-MimeOLE: Produced By Microsoft Exchange V6.5.6944.0
Content-class: urn:content-classes:message
MIME-Version: 1.0
Content-Type: text/plain;
charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
Subject: RE: [nycphp-talk] Recurring Monthly Calculations
Date: Fri, 25 Jun 2004 09:45:57 -0700
Message-ID: <41EE526EC2D3C74286415780D3BA9F8702C53F02 at ehost011-1.exch011.intermedia.net>
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
Thread-Topic: [nycphp-talk] Recurring Monthly Calculations
Thread-Index: AcRa0XklO3pXLe/QQUalvlU4tLscdQAAkERQ
From: "Hans Zaunere" <hans not junk at nyphp.com>
To: "NYPHP Talk" <talk at lists.nyphp.org>
X-OriginalArrivalTime: 25 Jun 2004 16:38:01.0918 (UTC)
FILETIME=[C80D8DE0:01C45AD2]
X-BeenThere: talk at lists.nyphp.org
X-Mailman-Version: 2.1.4
Precedence: list
Reply-To: NYPHP Talk <talk at lists.nyphp.org>
List-Id: NYPHP Talk <talk.lists.nyphp.org>
List-Unsubscribe: <http://lists.nyphp.org/mailman/listinfo/talk>,
<mailto:talk-request at lists.nyphp.org?subject=unsubscribe>
List-Archive: <http://lists.nyphp.org/pipermail/talk>
List-Post: <mailto:talk at lists.nyphp.org>
List-Help: <mailto:talk-request at lists.nyphp.org?subject=help>
List-Subscribe: <http://lists.nyphp.org/mailman/listinfo/talk>,
<mailto:talk-request at lists.nyphp.org?subject=subscribe>
X-List-Received-Date: Fri, 25 Jun 2004 16:46:01 -0000
> >I needed to write a function that will tell me the dates of future=20
> >events that recurr monthly by day of month. So for instance, "4th=20
> >Tuesday of the month for the next 6 months"
> > =20
> >
>=20
> Out of curiosity, why not use PEAR::Calendar?
>=20
> http://pear.php.net/manual/en/package.datetime.php
>=20
> Seems to enable the kind of logical loops that you are=20
> shooting for, right?
Well, yes and no. Their function is limited, ie it won't return a list
of dates that I could tell. Plus I didn't want to load up 100K+ of code
for something so small :)
Thanks for the links guys... my implmentation is actually very similar
to the VBA script posted (hark!)
H
More information about the talk
mailing list