[singlepic id=9 w=320 h=240 float=left]
We visited Carizo state park in April for wild flowers.
Many hills and files were covered with yellow carpet of wild flowers. It’s amazing! With the low and dark clouds, it just looks like a beautiful oil painting.
wget -q –http-user=webmaster –http-passwd=PASSWORD “http://www.abcd.com” -O /var/tmp/logfile
openssl s_client -connect mysite.com:443
To retrieve a certificate
openssl s_client -connect sdms.ecp:443 2>&1 | sed -ne ‘/-BEGIN CERTIFICATE-/,/-END CERTIFICATE-/p’
Useful page:
http://www.madboa.com/geek/openssl/
Use both Session and cookie to keep security for the website
$_COOKIE[session_name()]
the session name is stored as cookie, other variables are stored as session var
auth.php
<?php
session_set_cookie_params(7200,’/’,”,true);
session_start();
if($_SESSION[‘auth’]!=’xxx’){
session_destroy();
header(“Location: ./login.php\n\n”);
exit;
}else{
//check fingerprint
$fp = $_SERVER[“HTTP_USER_AGENT”];
$fp .= $_SERVER[“REMOTE_ADDR”];
$fp = md5($fp);
if($_SESSION[‘par’] != $fp){
header(“Location: ./login.php\n\n”);
exit;
}
}
?>
login.php
check if ID, pass are matched with those in db….then
session_start();
$_SESSION[‘user_id’] = $uid;
$_SESSION[‘grp_id’] = $gid;
$_SESSION[‘auth’] = 1;
$fp = $_SERVER[“HTTP_USER_AGENT”];
$fp .= $_SERVER[“REMOTE_ADDR”];
$_SESSION[‘remote’] = md5($fp);
header(“Location: ./index.php”);
logout.php
session_set_cookie_params(7200,’/’,”,true);
session_start();
$_SESSION = array();
if(isset($_COOKIE[session_name()])){
$params = session_get_cookie_params();
setcookie(session_name(), ”, time()-3600,
$params[“path”], $params[“domain”],
$params[“secure”], $params[“httponly”]
);
}
session_destroy();
header(“Location: ./login.php\n\n”);
exit;
session_destroy() destroy the session, and cookie will be deleted as setting the cookie lifetime as a time past
Insert
INSERT INTO tablename (col1, col2) VALUES(‘data1’, ‘data2’ );
Grant
GRANT ALL PRIVILEGES ON dbname.* to dbuser@localhost;
GRANT ALL PRIVILEGES ON dbname.* to dbuser@”%”;
GRANT SELECT ON dbname.dbtable to dbuser@”111.111.111.111″;
GRANT SELECT(colname) ON dbname.dbtable to dbuser@”111.111.111.111″;
set password for username = password(‘password’);
flush privileges;