Web Security Inspection
I am offering a free Inspection of any website for security. I will be scaning your website (using my personalised web crawler) for all pages that are accessible by the public. I will then rate the page from None to Urgent depending on the severity of the lack of security on that specific page. Bellow is a guide to what each rank means an an example of a result for a page. If you are interasted in an inspection of your website, please contact me, thank you.
None
A page will receive this rank if it takes absolutly no input from the user.
Low
This is the lowest possible rank a page that takes input, either by a GET request or by a FORM, can get. This ranks means that the page is secure and that the input seems to be cleaned before processing.
Medium
This is for pages wich contains forms that have hidden fields and are accesible to the public and the hidden field is validated. Their are better ways of passing arguments, such as by the SESSION variable, that is more secure then a hidden form field.
High
This is for pages which contains vulnerabilities which can cause serious damage to your site but require an expert hacker with great knowledge of mysql to perfome this act. This should be fixed as soon as possible since it can possibly lead to your sites destruction. Also pages which have forms which are not validated, especialy hidden forms, might be given this rank depening on the severity.
Urgent
This is for pages wich needs urgent attention. If a page can easely be hacked by the many basics guide online then the page will receive this ranking, because anyone could hack the page easely and compromise your system. Also a page might get this ranking if input from the user is not validated and is used to process money (such as hidden forms for e-comm).
Example
Report for gillespaquette.ca : Report-gillespaquette.ca.doc