like where you said i can backtrack from the solutions to exploits, i am going to have great difficulty with this. For example obviously for my project i’ve had to do initial research, so i provided a few examples of exploits that have occurred. one of which is: SQL commands via the ‘post_type’ parameter which sends to the ‘pingback.extentions.getpingbacks’ process. so i have looked up this on google and i don’t even know what these processes/methods are for, let alone being able to perform/mitigate against.
so saying to backtrack is going to be difficult because i literally understand very little.
i probably sound really stupid and you’re wondering why i’m doing IT security but as i said i just want to get it done and move on.
thanks