[OWASP_PHPSEC] OWASP_PHP_Security_Project Digest, Vol 7, Issue 25

Abbas Naderi abiusx at owasp.org
Sun Nov 10 18:15:23 UTC 2013


Paulo,
Awesome news. We have a new presentation moved to the OWASP template, since I don’t want to mess up with Rahul’s work on it, please ask him for the new version and contribute.
Thanks
-Abbas
______________________________________________________________
Notice: This message is digitally signed, its source and integrity are verifiable.
If you mail client does not support S/MIME verification, it will display a file (smime.p7s), which includes the X.509 certificate and the signature body.  Read more at Certified E-Mail with Comodo and Thunderbird in AbiusX.com

On Nov 10, 2013, at 1:13 PM, Paulo Guerreiro <paulocmguerreiro at gmail.com> wrote:

> Hi Rahul
> 
> I was just about to finish the slides i have been editing and saw that they have been updated. Since the presentation seems finished do you need anything else?
> 
> One thing that could look odd during the presentation is the fact that some slides have a lot of text, and some of them not that much. Is it worth to change(spread to several) the ones that are more filled?
> 
> 
> 
> 
> 2013/11/10 <owasp_php_security_project-request at lists.owasp.org>
> Send OWASP_PHP_Security_Project mailing list submissions to
>         owasp_php_security_project at lists.owasp.org
> 
> To subscribe or unsubscribe via the World Wide Web, visit
>         https://lists.owasp.org/mailman/listinfo/owasp_php_security_project
> or, via email, send a message with subject or body 'help' to
>         owasp_php_security_project-request at lists.owasp.org
> 
> You can reach the person managing the list at
>         owasp_php_security_project-owner at lists.owasp.org
> 
> When replying, please edit your Subject line so it is more specific
> than "Re: Contents of OWASP_PHP_Security_Project digest..."
> 
> 
> Today's Topics:
> 
>    1. Re: PHPSEC Presentation Slides (johanna curiel curiel)
> 
> 
> ----------------------------------------------------------------------
> 
> Message: 1
> Date: Sun, 10 Nov 2013 12:35:18 -0400
> From: johanna curiel curiel <johanna.curiel at owasp.org>
> To: rahul chaudhary <rahul300chaudhary400 at gmail.com>
> Cc: "owasp_php_security_project at lists.owasp.org"
>         <owasp_php_security_project at lists.owasp.org>
> Subject: Re: [OWASP_PHPSEC] PHPSEC Presentation Slides
> Message-ID:
>         <CACxry_0Uhmg1269R6cOk-cbMBszsLBKXjcoFue+uK4qA7OLDGQ at mail.gmail.com>
> Content-Type: text/plain; charset="windows-1252"
> 
> Hi Guys
> 
> Great work on the site , It looks very nice.
> As you know we are going to have a project review session and the only
> thing I'm missing for the PHP site is an updated OWASP page.
> Take a look of this project
> https://www.owasp.org/index.php/OWASP_Cornucopia
>  I recommend you to update the wiki also nicely so when people arrive to
> OWASP page, they get a nice impression and also can click on you r site.
> OWASP pages rank high in google searches so I recommend this strongly
> 
> regards
> 
> Johanna
> 
> 
> On Sun, Nov 10, 2013 at 12:25 PM, rahul chaudhary <
> rahul300chaudhary400 at gmail.com> wrote:
> 
> > the elephant one??
> >
> >
> > On Sun, Nov 10, 2013 at 10:21 AM, Abbas Naderi <abiusx at owasp.org> wrote:
> >
> >> But I already had a logo on the website! Did you look at it?
> >> -A
> >>       ______________________________________________________________
> >> *Notice:* This message is *digitally signed*, its *source* and
> >> *integrity* are verifiable.
> >> If you mail client does not support S/MIME verification, it will display
> >> a file (smime.p7s), which includes the X.509 certificate and the signature
> >> body.  Read more at Certified E-Mail with Comodo and Thunderbird<http://abiusx.com/certified-e-mail-with-comodo-and-thunderbird/> in
> >> AbiusX.com
> >>
> >> On Nov 10, 2013, at 1:12 AM, rahul chaudhary <
> >> rahul300chaudhary400 at gmail.com> wrote:
> >>
> >> PHPSEC new logo..I just made this logo from a random website...they were
> >> asking for money to download the logo...but I just did printscreen and
> >> created it....so if someone feels that we might get in trouble or the logo
> >> is bad...please design a new one and upload it in the slides..
> >>
> >>
> >> On Sat, Nov 9, 2013 at 7:19 AM, Shivam Dixit <shivamd001 at gmail.com>wrote:
> >>
> >>> Yeah. Someone has replaced it with the *old* "about" page !
> >>>
> >>> But I don't think that will be a problem as I think Rahul is working to
> >>> create documentation either importing everything from wiki or using PHP
> >>> Docs !
> >>>
> >>>
> >>> On Sat, Nov 9, 2013 at 3:37 PM, Minhaz A V <minhazav at gmail.com> wrote:
> >>>
> >>>> Well there is a small bug someone seems to have replaced
> >>>> http://phpsec.owasp.org/documentation/ by previous about/ page by
> >>>> mistake.
> >>>>
> >>>> Please replace it back with documentation page again whoever did it
> >>>> last time!
> >>>>
> >>>> Thanks
> >>>>
> >>>>
> >>>> On Sat, Nov 9, 2013 at 11:59 AM, Shivam Dixit <shivamd001 at gmail.com>wrote:
> >>>>
> >>>>> Yeah ! That would be great. We can use the documentation written in
> >>>>> the wiki page.
> >>>>>
> >>>>> I have updated the contents of about page.
> >>>>>
> >>>>> http://phpsec.owasp.org/about/
> >>>>>
> >>>>>
> >>>>>
> >>>>> On Sat, Nov 9, 2013 at 11:53 AM, rahul chaudhary <
> >>>>> rahul300chaudhary400 at gmail.com> wrote:
> >>>>>
> >>>>>> just a suggestion, I think that the documentation that I have already
> >>>>>> written in the OWASP wiki page can be imported here also...and more
> >>>>>> modification can be done on that...instead of doing it all over again...
> >>>>>>
> >>>>>>
> >>>>>> On Sat, Nov 9, 2013 at 1:12 AM, Shivam Dixit <shivamd001 at gmail.com>wrote:
> >>>>>>
> >>>>>>> Is the project present on sourceforge for download ? I need to give
> >>>>>>> a hyperlink in the website for download.
> >>>>>>>
> >>>>>>>
> >>>>>>> On Sat, Nov 9, 2013 at 12:42 AM, Azeddine Islam Mennouchi <
> >>>>>>> azeddine.mennouchi at owasp.org> wrote:
> >>>>>>>
> >>>>>>>> I thinks that php docs. Are generated auto.
> >>>>>>>> Rahul ?
> >>>>>>>> Le 8 nov. 2013 19:41, "Minhaz A V" <minhazav at gmail.com> a ?crit :
> >>>>>>>>
> >>>>>>>> Hey,
> >>>>>>>>> Its better we declare here itself on what we are working on and
> >>>>>>>>> others would know automatically if we want to keep it simple.
> >>>>>>>>> And we need to start work on documentation mainly I believe! Is
> >>>>>>>>> anybody into it already?
> >>>>>>>>> Also I have never done documentation work till date any guidelines
> >>>>>>>>> before I contribute?
> >>>>>>>>>
> >>>>>>>>> Minhaz
> >>>>>>>>>
> >>>>>>>>>
> >>>>>>>>> On Fri, Nov 8, 2013 at 11:10 PM, Abbas Naderi <abiusx at owasp.org>wrote:
> >>>>>>>>>
> >>>>>>>>>> Don?t overcomplicate things.
> >>>>>>>>>> Its not code, its just simple smalltime HTML!
> >>>>>>>>>>  -Abbas
> >>>>>>>>>>
> >>>>>>>>>> ______________________________________________________________
> >>>>>>>>>> *Notice:* This message is *digitally signed*, its *source* and
> >>>>>>>>>> *integrity* are verifiable.
> >>>>>>>>>> If you mail client does not support S/MIME verification, it will
> >>>>>>>>>> display a file (smime.p7s), which includes the X.509 certificate and the
> >>>>>>>>>> signature body.  Read more at Certified E-Mail with Comodo and
> >>>>>>>>>> Thunderbird<http://abiusx.com/certified-e-mail-with-comodo-and-thunderbird/> in
> >>>>>>>>>> AbiusX.com <http://abiusx.com/>
> >>>>>>>>>>
> >>>>>>>>>> On Nov 8, 2013, at 12:34 PM, Abhishek Das <das.abhshk at gmail.com>
> >>>>>>>>>> wrote:
> >>>>>>>>>>
> >>>>>>>>>> git + rsync for your local development environment, if we don't
> >>>>>>>>>> have root access on the server.
> >>>>>>>>>>
> >>>>>>>>>>
> >>>>>>>>>> On Fri, Nov 8, 2013 at 11:02 PM, Abhishek Das <
> >>>>>>>>>> das.abhshk at gmail.com> wrote:
> >>>>>>>>>>
> >>>>>>>>>>> Yes, I understand that you are working on the website. It's in
> >>>>>>>>>>> general a good idea to maintain your code under git for ease of
> >>>>>>>>>>> collaboration.
> >>>>>>>>>>>
> >>>>>>>>>>> And we should use git for the website code as well, if it's not
> >>>>>>>>>>> being done already. You can possibly set it up, I suppose.
> >>>>>>>>>>>
> >>>>>>>>>>>
> >>>>>>>>>>> On Fri, Nov 8, 2013 at 10:56 PM, Shivam Dixit <
> >>>>>>>>>>> shivamd001 at gmail.com> wrote:
> >>>>>>>>>>>
> >>>>>>>>>>>> @Abhishek ,
> >>>>>>>>>>>> I am working on *website* of PHPSec, *not* the repository. I
> >>>>>>>>>>>> can see that there is no version control installed for the website.
> >>>>>>>>>>>>
> >>>>>>>>>>>>
> >>>>>>>>>>>> On Fri, Nov 8, 2013 at 10:53 PM, Abhishek Das <
> >>>>>>>>>>>> das.abhshk at gmail.com> wrote:
> >>>>>>>>>>>>
> >>>>>>>>>>>>> Version control is built exactly for this purpose! Keep
> >>>>>>>>>>>>> pushing your commits. :D
> >>>>>>>>>>>>>
> >>>>>>>>>>>>>
> >>>>>>>>>>>>> On Fri, Nov 8, 2013 at 10:50 PM, Shivam Dixit <
> >>>>>>>>>>>>> shivamd001 at gmail.com> wrote:
> >>>>>>>>>>>>>
> >>>>>>>>>>>>>> Hi
> >>>>>>>>>>>>>>
> >>>>>>>>>>>>>> Small question! If two people work on same file of the
> >>>>>>>>>>>>>> website will it be a problem? Because I am working on about.html. Is anyone
> >>>>>>>>>>>>>> else working ?
> >>>>>>>>>>>>>>
> >>>>>>>>>>>>>> Thanks
> >>>>>>>>>>>>>>
> >>>>>>>>>>>>>>
> >>>>>>>>>>>>>> On Fri, Nov 8, 2013 at 9:56 PM, Abbas Naderi <
> >>>>>>>>>>>>>> abiusx at owasp.org> wrote:
> >>>>>>>>>>>>>>
> >>>>>>>>>>>>>>> Awesome work!
> >>>>>>>>>>>>>>> I see some slides are not filled yet.
> >>>>>>>>>>>>>>> Unfortunately I?m extra busy setting up the summit, creating
> >>>>>>>>>>>>>>> stickers and everything, so could someone please take care of the website?
> >>>>>>>>>>>>>>> Rahul, can you upload the docs in the site, changing the
> >>>>>>>>>>>>>>> texts is not that bad.
> >>>>>>>>>>>>>>>
> >>>>>>>>>>>>>>> Everyone else, please send me your full names plus a
> >>>>>>>>>>>>>>> hyperlink (to whatever identifies you), and a thumbnail of your face, and a
> >>>>>>>>>>>>>>> one liner about yourself, so that I can add those to the contributors list.
> >>>>>>>>>>>>>>> Thanks
> >>>>>>>>>>>>>>> -Abbas
> >>>>>>>>>>>>>>>
> >>>>>>>>>>>>>>>
> >>>>>>>>>>>>>>> ______________________________________________________________
> >>>>>>>>>>>>>>> *Notice:* This message is *digitally signed*, its *source*
> >>>>>>>>>>>>>>>  and *integrity* are verifiable.
> >>>>>>>>>>>>>>> If you mail client does not support S/MIME verification, it
> >>>>>>>>>>>>>>> will display a file (smime.p7s), which includes the X.509 certificate and
> >>>>>>>>>>>>>>> the signature body.  Read more at Certified E-Mail with
> >>>>>>>>>>>>>>> Comodo and Thunderbird<http://abiusx.com/certified-e-mail-with-comodo-and-thunderbird/> in
> >>>>>>>>>>>>>>> AbiusX.com <http://abiusx.com/>
> >>>>>>>>>>>>>>>
> >>>>>>>>>>>>>>> On Nov 8, 2013, at 3:59 AM, rahul chaudhary <
> >>>>>>>>>>>>>>> rahul300chaudhary400 at gmail.com> wrote:
> >>>>>>>>>>>>>>>
> >>>>>>>>>>>>>>> Hello All,
> >>>>>>>>>>>>>>>
> >>>>>>>>>>>>>>> I have completed the slides...whooo (before time) ... :P
> >>>>>>>>>>>>>>> Here is the link again:
> >>>>>>>>>>>>>>>
> >>>>>>>>>>>>>>> https://docs.google.com/presentation/d/1hReOoKa-FxbKhVgH3rrrbHxnOGJe7kpp1gABUDIgeU8/edit#slide=id.g1731cf52e_029
> >>>>>>>>>>>>>>>
> >>>>>>>>>>>>>>> This is the first attempt to the slides...I personally think
> >>>>>>>>>>>>>>> that there are few slides and it lacks many examples and pictures. So
> >>>>>>>>>>>>>>> please go ahead and change some things. Add more examples and many more.
> >>>>>>>>>>>>>>>
> >>>>>>>>>>>>>>>
> >>>>>>>>>>>>>>>
> >>>>>>>>>>>>>>> On Tue, Nov 5, 2013 at 10:20 AM, Abbas Naderi <
> >>>>>>>>>>>>>>> abiusx at owasp.org> wrote:
> >>>>>>>>>>>>>>>
> >>>>>>>>>>>>>>>> We can always switch to a CMS later, but polishing a CMS is
> >>>>>>>>>>>>>>>> a lot of work and I?m afraid we need this before that.
> >>>>>>>>>>>>>>>> -A
> >>>>>>>>>>>>>>>>
> >>>>>>>>>>>>>>>> ______________________________________________________________
> >>>>>>>>>>>>>>>> *Notice:* This message is *digitally signed*, its *source*
> >>>>>>>>>>>>>>>>  and *integrity* are verifiable.
> >>>>>>>>>>>>>>>> If you mail client does not support S/MIME verification, it
> >>>>>>>>>>>>>>>> will display a file (smime.p7s), which includes the X.509 certificate and
> >>>>>>>>>>>>>>>> the signature body.  Read more at Certified E-Mail with
> >>>>>>>>>>>>>>>> Comodo and Thunderbird<http://abiusx.com/certified-e-mail-with-comodo-and-thunderbird/> in
> >>>>>>>>>>>>>>>> AbiusX.com <http://abiusx.com/>
> >>>>>>>>>>>>>>>>
> >>>>>>>>>>>>>>>> On Nov 5, 2013, at 6:15 AM, Azeddine Islam Mennouchi <
> >>>>>>>>>>>>>>>> azeddine.mennouchi at owasp.org> wrote:
> >>>>>>>>>>>>>>>>
> >>>>>>>>>>>>>>>> Since Abbas started using bootstrap we are going to
> >>>>>>>>>>>>>>>> continue with it I was working localy on a Joomla site with a paid template
> >>>>>>>>>>>>>>>>
> >>>>>>>>>>>>>>>> Regards Islam,
> >>>>>>>>>>>>>>>> _______________________________________________
> >>>>>>>>>>>>>>>>
> >>>>>>>>>>>>>>>> OWASP_PHP_Security_Project mailing list
> >>>>>>>>>>>>>>>> OWASP_PHP_Security_Project at lists.owasp.org
> >>>>>>>>>>>>>>>>
> >>>>>>>>>>>>>>>> https://lists.owasp.org/mailman/listinfo/owasp_php_security_project
> >>>>>>>>>>>>>>>>
> >>>>>>>>>>>>>>>>
> >>>>>>>>>>>>>>>>
> >>>>>>>>>>>>>>>> _______________________________________________
> >>>>>>>>>>>>>>>> OWASP_PHP_Security_Project mailing list
> >>>>>>>>>>>>>>>> OWASP_PHP_Security_Project at lists.owasp.org
> >>>>>>>>>>>>>>>>
> >>>>>>>>>>>>>>>> https://lists.owasp.org/mailman/listinfo/owasp_php_security_project
> >>>>>>>>>>>>>>>>
> >>>>>>>>>>>>>>>>
> >>>>>>>>>>>>>>>
> >>>>>>>>>>>>>>>
> >>>>>>>>>>>>>>> --
> >>>>>>>>>>>>>>> Regards,
> >>>>>>>>>>>>>>> Rahul Chaudhary
> >>>>>>>>>>>>>>> Ph - 412-519-9634
> >>>>>>>>>>>>>>>
> >>>>>>>>>>>>>>>
> >>>>>>>>>>>>>>>
> >>>>>>>>>>>>>>> _______________________________________________
> >>>>>>>>>>>>>>> OWASP_PHP_Security_Project mailing list
> >>>>>>>>>>>>>>> OWASP_PHP_Security_Project at lists.owasp.org
> >>>>>>>>>>>>>>>
> >>>>>>>>>>>>>>> https://lists.owasp.org/mailman/listinfo/owasp_php_security_project
> >>>>>>>>>>>>>>>
> >>>>>>>>>>>>>>>
> >>>>>>>>>>>>>>
> >>>>>>>>>>>>>>
> >>>>>>>>>>>>>> --
> >>>>>>>>>>>>>> *Cheers*
> >>>>>>>>>>>>>> *Shivam*
> >>>>>>>>>>>>>> *I work here : *http://zeoco.de/1001001000
> >>>>>>>>>>>>>>
> >>>>>>>>>>>>>> _______________________________________________
> >>>>>>>>>>>>>> OWASP_PHP_Security_Project mailing list
> >>>>>>>>>>>>>> OWASP_PHP_Security_Project at lists.owasp.org
> >>>>>>>>>>>>>>
> >>>>>>>>>>>>>> https://lists.owasp.org/mailman/listinfo/owasp_php_security_project
> >>>>>>>>>>>>>>
> >>>>>>>>>>>>>>
> >>>>>>>>>>>>>
> >>>>>>>>>>>>>
> >>>>>>>>>>>>> --
> >>>>>>>>>>>>> Abhishek Das
> >>>>>>>>>>>>>  IIT Roorkee
> >>>>>>>>>>>>>
> >>>>>>>>>>>>
> >>>>>>>>>>>>
> >>>>>>>>>>>>
> >>>>>>>>>>>> --
> >>>>>>>>>>>> *Cheers*
> >>>>>>>>>>>> *Shivam*
> >>>>>>>>>>>> *I work here : *http://zeoco.de/1001001000
> >>>>>>>>>>>>
> >>>>>>>>>>>
> >>>>>>>>>>>
> >>>>>>>>>>>
> >>>>>>>>>>> --
> >>>>>>>>>>> Abhishek Das
> >>>>>>>>>>> IIT Roorkee
> >>>>>>>>>>>
> >>>>>>>>>>
> >>>>>>>>>>
> >>>>>>>>>>
> >>>>>>>>>> --
> >>>>>>>>>> Abhishek Das
> >>>>>>>>>> IIT Roorkee
> >>>>>>>>>>
> >>>>>>>>>>
> >>>>>>>>>>
> >>>>>>>>>> _______________________________________________
> >>>>>>>>>> OWASP_PHP_Security_Project mailing list
> >>>>>>>>>> OWASP_PHP_Security_Project at lists.owasp.org
> >>>>>>>>>>
> >>>>>>>>>> https://lists.owasp.org/mailman/listinfo/owasp_php_security_project
> >>>>>>>>>>
> >>>>>>>>>>
> >>>>>>>>>
> >>>>>>>>> _______________________________________________
> >>>>>>>>> OWASP_PHP_Security_Project mailing list
> >>>>>>>>> OWASP_PHP_Security_Project at lists.owasp.org
> >>>>>>>>> https://lists.owasp.org/mailman/listinfo/owasp_php_security_project
> >>>>>>>>>
> >>>>>>>>>
> >>>>>>>> _______________________________________________
> >>>>>>>> OWASP_PHP_Security_Project mailing list
> >>>>>>>> OWASP_PHP_Security_Project at lists.owasp.org
> >>>>>>>> https://lists.owasp.org/mailman/listinfo/owasp_php_security_project
> >>>>>>>>
> >>>>>>>>
> >>>>>>>
> >>>>>>>
> >>>>>>> --
> >>>>>>> *Cheers*
> >>>>>>> *Shivam*
> >>>>>>> *I work here : *http://zeoco.de/1001001000
> >>>>>>>
> >>>>>>> _______________________________________________
> >>>>>>> OWASP_PHP_Security_Project mailing list
> >>>>>>> OWASP_PHP_Security_Project at lists.owasp.org
> >>>>>>> https://lists.owasp.org/mailman/listinfo/owasp_php_security_project
> >>>>>>>
> >>>>>>>
> >>>>>>
> >>>>>>
> >>>>>> --
> >>>>>> Regards,
> >>>>>> Rahul Chaudhary
> >>>>>> Ph - 412-519-9634
> >>>>>>
> >>>>>
> >>>>>
> >>>>>
> >>>>> --
> >>>>> *Cheers*
> >>>>> *Shivam*
> >>>>> *I work here : *http://zeoco.de/1001001000
> >>>>>
> >>>>> _______________________________________________
> >>>>> OWASP_PHP_Security_Project mailing list
> >>>>> OWASP_PHP_Security_Project at lists.owasp.org
> >>>>> https://lists.owasp.org/mailman/listinfo/owasp_php_security_project
> >>>>>
> >>>>>
> >>>>
> >>>
> >>>
> >>> --
> >>> *Cheers*
> >>> *Shivam*
> >>> *I work here : *http://zeoco.de/1001001000
> >>>
> >>
> >>
> >>
> >> --
> >> Regards,
> >> Rahul Chaudhary
> >> Ph - 412-519-9634
> >>
> >>
> >>
> >
> >
> > --
> > Regards,
> > Rahul Chaudhary
> > Ph - 412-519-9634
> >
> > _______________________________________________
> > OWASP_PHP_Security_Project mailing list
> > OWASP_PHP_Security_Project at lists.owasp.org
> > https://lists.owasp.org/mailman/listinfo/owasp_php_security_project
> >
> >
> -------------- next part --------------
> An HTML attachment was scrubbed...
> URL: <http://lists.owasp.org/pipermail/owasp_php_security_project/attachments/20131110/7a5ad1b8/attachment.html>
> 
> ------------------------------
> 
> _______________________________________________
> OWASP_PHP_Security_Project mailing list
> OWASP_PHP_Security_Project at lists.owasp.org
> https://lists.owasp.org/mailman/listinfo/owasp_php_security_project
> 
> 
> End of OWASP_PHP_Security_Project Digest, Vol 7, Issue 25
> *********************************************************
> 
> _______________________________________________
> OWASP_PHP_Security_Project mailing list
> OWASP_PHP_Security_Project at lists.owasp.org
> https://lists.owasp.org/mailman/listinfo/owasp_php_security_project

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.owasp.org/pipermail/owasp_php_security_project/attachments/20131110/d9aa6d23/attachment-0001.html>


More information about the OWASP_PHP_Security_Project mailing list