NYCPHP Meetup

NYPHP.org

[nycphp-talk] IIS server exploit with malicious js injection spawned during PHP Security Seminar

Daniel Convissor danielc at analysisandsolutions.com
Fri Jun 25 12:45:46 EDT 2004


On Fri, Jun 25, 2004 at 12:40:55PM -0400, inforequest wrote:
> 
> learn that a server exploit has injected malicious js code into footers 
> of website pages, with the js designed to exploit an M$ IE flaw, 
> secretely downloading the Scob trojan

And people wonder why I keep JavaScrap turned off...

--Dan

-- 
 T H E   A N A L Y S I S   A N D   S O L U T I O N S   C O M P A N Y
            data intensive web and database programming
                http://www.AnalysisAndSolutions.com/
 4015 7th Ave #4, Brooklyn NY 11232  v: 718-854-0335 f: 718-854-0409

>From hans not junk at nyphp.com  Fri Jun 25 12:46:01 2004
Return-Path: <hans not junk at nyphp.com>
Received: from smtp11.intermedia.net (smtp11.intermedia.net [64.78.21.10])
	by virtu.nyphp.org (Postfix) with ESMTP id 275A9A8771
	for <talk at lists.nyphp.org>; Fri, 25 Jun 2004 12:46:01 -0400 (EDT)
Received: from ehost011-1.intermedia.net ([64.78.21.3]) by
	smtp11.intermedia.net with Microsoft SMTPSVC(6.0.3790.0); 
	Fri, 25 Jun 2004 09:38:01 -0700
X-MimeOLE: Produced By Microsoft Exchange V6.5.6944.0
Content-class: urn:content-classes:message
MIME-Version: 1.0
Content-Type: text/plain;
	charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
Subject: RE: [nycphp-talk] Recurring Monthly Calculations
Date: Fri, 25 Jun 2004 09:45:57 -0700
Message-ID: <41EE526EC2D3C74286415780D3BA9F8702C53F02 at ehost011-1.exch011.intermedia.net>
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
Thread-Topic: [nycphp-talk] Recurring Monthly Calculations
Thread-Index: AcRa0XklO3pXLe/QQUalvlU4tLscdQAAkERQ
From: "Hans Zaunere" <hans not junk at nyphp.com>
To: "NYPHP Talk" <talk at lists.nyphp.org>
X-OriginalArrivalTime: 25 Jun 2004 16:38:01.0918 (UTC)
	FILETIME=[C80D8DE0:01C45AD2]
X-BeenThere: talk at lists.nyphp.org
X-Mailman-Version: 2.1.4
Precedence: list
Reply-To: NYPHP Talk <talk at lists.nyphp.org>
List-Id: NYPHP Talk <talk.lists.nyphp.org>
List-Unsubscribe: <http://lists.nyphp.org/mailman/listinfo/talk>,
	<mailto:talk-request at lists.nyphp.org?subject=unsubscribe>
List-Archive: <http://lists.nyphp.org/pipermail/talk>
List-Post: <mailto:talk at lists.nyphp.org>
List-Help: <mailto:talk-request at lists.nyphp.org?subject=help>
List-Subscribe: <http://lists.nyphp.org/mailman/listinfo/talk>,
	<mailto:talk-request at lists.nyphp.org?subject=subscribe>
X-List-Received-Date: Fri, 25 Jun 2004 16:46:01 -0000


> >I needed to write a function that will tell me the dates of future=20
> >events that recurr monthly by day of month.  So for instance, "4th=20
> >Tuesday of the month for the next 6 months"
> > =20
> >
>=20
> Out of curiosity, why not use PEAR::Calendar?
>=20
>     http://pear.php.net/manual/en/package.datetime.php
>=20
> Seems to enable the kind of logical loops that you are=20
> shooting for, right?

Well, yes and no.  Their function is limited, ie it won't return a list
of dates that I could tell.  Plus I didn't want to load up 100K+ of code
for something so small :)

Thanks for the links guys... my implmentation is actually very similar
to the VBA script posted (hark!)

H




More information about the talk mailing list