http://blog.najdek.me/tags/php/Recent content in Php on Mateusz Najdek - blogHugo -- gohugo.ioen-usmateusz@najdek.me (Mateusz Najdek)mateusz@najdek.me (Mateusz Najdek)Sat, 30 May 2026 01:10:22 +0200http://blog.najdek.me/posts/responsible-disclosure-reflected-xss-sso/Sat, 30 May 2026 01:10:22 +0200mateusz@najdek.me (Mateusz Najdek)http://blog.najdek.me/posts/responsible-disclosure-reflected-xss-sso/Disclaimer: The vulnerability described below was discovered during independent security research. It has been responsibly disclosed to the institution’s IT department and was patched immediately. All sensitive details (target name, URLs) have been redacted to maintain confidentiality. Introduction Following up on my October 2025 discovery of a Path Traversal vulnerability in the Student Portal, I continued to keep an eye on the core infrastructure of the institution. Once you realize that legacy components exist in production, it is only logical to examine how the most critical gateways handle data.http://blog.najdek.me/posts/responsible-disclosure-path-traversal/Mon, 08 Dec 2025 01:16:36 +0200mateusz@najdek.me (Mateusz Najdek)http://blog.najdek.me/posts/responsible-disclosure-path-traversal/Disclaimer: The vulnerability described below was discovered during independent security research. It has been responsibly disclosed to the institution’s IT department and was patched immediately. All sensitive details (target name, URLs) have been redacted to maintain confidentiality. Introduction With a background in e-commerce engineering and system architecture, I have a habit of checking the “health” of the systems I interact with. During my first week of university, while browsing the Student Portal, my “security radar” went off.http://blog.najdek.me/posts/building-custom-erp-native-php/Sat, 20 Jul 2024 14:00:00 +0200mateusz@najdek.me (Mateusz Najdek)http://blog.najdek.me/posts/building-custom-erp-native-php/Context: In the e-commerce world, the standard advice is “Don’t reinvent the wheel—use Shopify or BaseLinker.” I ignored that advice. I run a personalized manufacturing business (printing custom t-shirts and mugs) as a one-man operation. When you are working alone, you don’t need “enterprise features”—you need a force multiplier. Here is how I built “Monmat Manager,” a proprietary ERP that allows me to process hundreds of orders solo. The “Buy vs.