Archive for March, 2008

Server did not recognize the value of HTTP Header SOAPAction

Wednesday, March 26th, 2008

Error messages are quite annoying for any one, I am not an exception for it..

This is the latest one I received when I was testing a webservice client using PHP NuSOAP library.. Well my client’s webserver is still running on PHP4 so I cant use the built in SOAPClient for PHP5 :(

I resolved this by modifying the usage of the NuSOAP soap client. Initially I tried a simple soap client when this error came, by when I tried the wsdl client, it worked fine. Change is only how you instantiate the soap client.

Is your application vulnerable to Cross Site Scripting (XSS)?

Tuesday, March 18th, 2008

Well.. One of the security tests you need to do in your web application is to verify that it is free from cross site scripting vulnerability.

read more about cross site scripting (XSS) at http://en.wikipedia.org/wiki/Cross_site_scripting

Here is the simple test to verify whether your web form is vulnerable to XSS or not.

Just type in

<script>alert(“Testing for XSS….. And this form is vulnerable to XSS”);</script>

Submit the form. Upon submitting the form, if you are seeing a javascript alert saying “Testing for XSS….. And this form is vulnerable to XSS” , obviously your web form is not secure against XSS attacks !!

How to access mysql command mode in XAMPP

Monday, March 10th, 2008

I had searched for some time for the same thing.. But here it is..

This is only in the case of a linux system..

Say your XAMPP files are at /opt/lampp

On command line, type (assuming you want to log in as root)
/opt/lampp/bin/mysql -u root -p

This will be followed by typing the mysql password, thats it.. You are on command mode of mysql !!

Crawler bots and robots.txt

Thursday, March 6th, 2008

I might probabbly add a post for SEO beginners about robots.txt and how to create them in a later post..

So basically this is for someone who already know a bit about web crawlers and robots.txt .

Do all the web bots (crawlers) refer to robots.txt before they enter the site?

Not necessarily yes.. I was trying to build a miniature web robot and  as it was the initial stage, I wasn’t following the robots.txt instructions..

So its not a filter you are keeping in your site by using robots.txt . Its a rule for an ethical search engine robot to check robots.txt for excluded files. Never take this for granted that you can hide any file from any robot by keeping a robots.txt instruction.

This post doesn’t mean that I am into unethical robot development, I will try to include functionality to check robots.txt instructions.