tech blog
Cloud first but not cloud only – with the new upcoming 7.10 release of ICM we will introduce Microsoft SQL Server and therefore Azure SQL Database as an alternative to Oracle Database. Using Azure SQL Database gives every project the
This month (more precise in 17 days) the General Data Protection Regulation (GDPR) becomes effective. The new Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 repeals the Directive 95/46/EC. This is actually to
Half a year ago I wrote this article about Oracle Java SE 9. Things got stirred up a little bit! A couple of changes regarding the support of Oracle’s JDK have been announced
Two vulnerabilities are in the news right now Spectre and Meltdown and everyone but those who are affected is talking about. Both vulnerabilities are really bad news for CPU manufacturer like Intel, AMD and ARM. The following vulnerabilities are registered
Big changes are coming! And I don’t mean the new features of the new JDK 9 which was released on the 21st. of September by Oracle. I would like to turn attention to the new release and support cycle. Releases
To avoid SQL injection vulnerabilities only prepared statements with parameter binding should be used: String custname = request.getParameter(“customerName”); String query = “SELECT account_balance FROM user_data WHERE user_name = ?”; PreparedStatement pstmt = connection.prepareStatement(query); pstmt.setString(1, custname); ResultSet results = pstmt.executeQuery(); Intershop
For additional information please refer to Overview – Administration and Configuration and its subsequent documents. User Credentials & Passwords By default Intershop used to have a cryptographic one-way hash function (MD5) to encrypt the users password. As MD5 is known
As the base for XSS vulnerability is the non-encoded integration of untrusted input into dynamically created web pages, it is necessary to make sure that any input is encoded when being displayed. With Intershop Commerce Management (ICM) this is being
Indirect Object References Sensitive parameters in URLs should be encrypted or processed in a way that the range of possible values is much larger than the range of really used values. The probability to guess a valid value would drop
Application Updates Regular product updates, hotfixes and patches are released for Intershop products fixing also potential security issues. The support department informs about important security updates via newsletter “security bulletin”. Updates and patches are announced at the support web page