From: Michael S. <mi...@st...> - 2009-04-28 11:30:42
|
mete bilgin wrote: > I'm developing a web-based ldap gui with python ( with python-ldap ). > And i miss something about security. How can i blocked ldap injection? Could you please elaborate on what you mean with "ldap injection"? Most security issues with attacking the connection can be cured with SSL/TLS. So your client should support LDAPS and StartTLS ext.op. and defining the trusted root CA certs. Ciao, Michael. |