Automatic detection of access control violations in software applications is a challenging problem. Insecure Direct Object Reference ((IDOR)) is among top-ranked vulnerabilities, which violates access control policies and cannot be yet detected by automated vulnerability scanners. While such tools may detect the absence of access control by static or dynamic testing, they cannot verify if it is properly functioning when it is present. When a tool detects requesting access to an Object, it is not aware of access control policies to infer whether the request is permitted. This completely depends on the access control logic and there is no automatic way to fully and precisely capture it from software behavior. Taking this challenge into consideration, this article proposes a black-box method to detect (IDOR) vulnerabilities in web applications without knowing access control logic. To this purpose, we first, gather information from the web application by a semi-automatic crawling process. Then, we tricksily manipulate legal requests to create effective attacks on the web application. Finally, we analyze received responses to check whether the requests are vulnerable to (IDOR). The detection process in the analysis phase is supported by our set theory based formal modeling of such vulnerabilities. The proposed method has been implemented as an (IDOR) detection tool (IDOT) and evaluated on a couple of vulnerable web applications. Evaluation results show that the method can effectively detect (IDOR) vulnerabilities provided that enough information is gathered in the crawling phase.

This paper deals with the place or position of the Direct Object (DO) in the sentence in Persian. The author believes that the DO does not have one fixed position, but can change its location depending on the circumstances.After some research in the writings of contemporary Iranian writers, the author has found the following rule valid: In Persian sentences if the DO is a 'specific' noun, then its 'unmarked position' will be before the inDirect Object (10), and if the noun is 'non-specific' then it will follow the 10 and precede the verb. The author then goes on to explain the theoretical aspects of this proposition. He says 'scrambling' is one way of testing Direct Objects to find out if they are 'specific' or 'non-specific'.

The aim of this research is to investigate Object omission based on Role and Reference Grammar. Object omission is a valency-reduction process in which a verb which is transitive in nature, appears without its Object. This study, will indicate semantic, syntactic and pragmatic representation of the aforementioned construction with respect to the presented concepts in Role and Reference Grammar including the layered structure of the clause, logical structure, semantic macroroles, information structure, activation status of the referents and linking algorithm. Explaining Object omission in the framework of RRG, indicates one of the advantages of this grammar. Although RRG attends to the interaction between form and function, it declines the abstract layers or elements in the syntactic analysis. Accordingly, in this grammar the syntactic structure of the clause is represented based on what is explicitly applicable. Therefore, RRG is not faced with any restriction in explaining Object omission and regarding what is explicitly presented in the sentence, it behaves with transitive verbs which omit their Objects as intransitive ones. The most specific attainments of investigating Object omission in the framework of RRG are as follows: In the layered structure of a clause with omitted Object, one of the arguments of the core will be reduced and the syntactic representation will be like an intransitive verb with just one argument (subject) in the core. The logical structure of such verbs, likewise, will be represent with just one argument (x), unlike transitive verbs which has two arguments (x, y) in logical structure. Regarding the aktionsart type of the verbs, the findings indicate that activities are the most frequent verbs in Object omission construction. the reason is that the second argument of activity verbs is not a macrorole and therefore can be omitted. Describing Object omission with regard to information structure and activation status of the referents in RRG shows that as in the aforementioned construction the Object is omitted, it cannot be a focal or topical element and its referent can be considered as an accessible one. Since it is the hearer’s knowledge of the world that makes it possible to understand the notion of the omitted Object. Moreover, in this study, regarding Object omission construction, linking algorithm from semantic to syntax and from syntax to semantics has been provided. The biDirectional diagrams show that the linking principles of selecting and linking undergoer in both Directions will not exist in the Objectless sentences.

Direct Reference theory, against Frege's and Russell's view, claims that the semantic content of a proper name does not have any description as its sense and that name without any attributive means, i.e. Directly, designates its referent, viz., the semantic content of a proper name is its referent. Empty proper names create some problems in this theory: Does the sentence which contains such names express any proposition? And can it be believed? Does this kind of sentence have truth values? What about the justification of true negative existential sentences? And, finally, if these sentences lack any semantic content how could their obvious difference in meaning be justified? In this article, I will do a critical investigation of the most important answers to those problems, and will show that, though some of these answers are valuable, they are not complete.

Scrambling moves a constituent from its default position and changes the information structure of the sentence. In this process, information patterns of the sentence are changed to determine the information structure. The results of the information structure analysis of scrambled Persian sentences in this paper show that scrambling is hearer-old and discourse old. Moreover, the survey of intonation pattern in scrambled constituents shows that in nonspecific noun phrases, L+H* intonation may exist, while in specific noun phrases, the kind of focus depends on context.

Researchers have variously investigated Persian in generative, functional, and cognitive frameworks, although, failed to account for some structural changes and the emergence of marked structures such as Left dislocation. The main goal of this article is to investigate left dislocation based on Optimality Theory. The present research is based on the descriptive-analytical method, and our corpus will include spoken Persian. The present paper aims to show that some constraints can be applied to form left dislocation in Persian, while ranking of the constraints represents the optimal form/forms. The constriants are based on constructional uints of Featurs and Conceptual Units which are properties of grammatical categories such as argument, or discourse-functioal ones, such as topic. The results show that applying the constraints of precedence, adjacency, and faithfulness on one side, and more features or conceptual units on the other side, the applied theory can further result in appropriate analysis of Persian cases. In other words, Syntax First Alignment has proved to be a promising framework for modeling Persian Left dislocation and can offer an alternative for syntactic frameworks based on hierarchical structure. The results, also, indicates that the features of [NEW], [ABOUT], and [CONTRAST] have key roles in Persisn Argument Left Dislocation. In addition, violating the constraints of Subject and Topic brings about unoptimality.

Direct Objects are encoded via specific grammatical tools in Persian. Using random data mostly from colloquial Persian (and written Persian in case of need), the author first intend to introduce these tools. Employing the Layered Structure of the Clause and Focus Structure as defined in Role and Reference Grammar, the author proceeds to formally represent the tools via syntactic templates that contain information-structural properties of the Direct Object. We learn that the hypothesis regarding the Direct Object being a secondary topic marker in the spirit of ra-marking (Dabir-Moghaddam, 2006) needs to be discarded. Information-structurally, not only is the Direct Object qualified to be part of the pragmatic presupposition, hence serving as the topic of the sentence, it is also licensed to constitute a narrow focus by itself or to participate in predicate and sentence focus structures. This originates from the fact that-ra in Persian signals the identifiability of the Object’ s referent in the interlocutors’ discourse universe. It is also proposed that the bi-fold classification of a narrow focus into in-situ information focus and ex-situ contrastive focus does not only apply to the narrow focus in the spirit of Persian data. A predicate focus can be contrastive when a ra-marked Object residing at the Pre-Core Slot is disjoined from the transitive predicate by an intervening subject. In actuality, this discontinuous predicate focus structure is ‘ construed’ as a contrastive narrow focus.

2Introduction: Bipolar disorder is one of the common and debilitating psychiatric disorders, which includes different aspects of a person's personal, family and social life.The purpose of this research was to investigate the effect of Object relations psychotherapy on Insecure attachment Styles of 25-30-year-old women with bipolar disorder. Method: This research was a semi-experimental type with a pre-test-post-test design and a 2-month follow-up, along with a control group. The statistical population consisted of all women with bipolar disorder hospitalized in Isfahan psychiatric hospitals in 1402-1401. Among the patients referred to Modares Psychiatric Hospital, Isfahan, 40 women with bipolar disorder were selected using a random method and based on inclusion and exclusion criteria, and were randomly assigned to two experimental and control groups (n=20). The research tool was Hazen and Shaver (1987) attachment style questionnaire. The experimental group was exposed to 16 sessions of 45-minute Object relations psychotherapy based on a master protocol, while the control group was on the waiting list. Data were analyzed using SPSS 23 statistical software and variance analysis with repeated measurements.  Findings :The results of the data analysis showed that there was a significant difference between the adjusted averages of attachment variables, avoidant Insecure attachment and ambivalent Insecure attachment in the experimental group after the implementation of the intervention, and this difference continued until the follow-up stage (P<0.01). Conclusion: Considering the effectiveness of Object relations psychotherapy on Insecure attachment patterns, this treatment method can be used to improve patients with bipolar disorder.

The present study aimed at investigating clitic doubling in Kalhori Kurdish. The implications of clitic doubling for Kurdish syntax were also investigated. In other words, it was attempted to find whether clitic doubling is a common feature of this language variety or it leads to some syntactic operations including (left or right) dislocation of NP arguments. Another implication of this study is to shed light on the distinction made between (inflectional) affix and clitic. The present study was a descriptive-analytic one in which many arguments were presented to deal with the nature of the relationship between clitic doubling and syntactic structure in Kalhori Kurdish. Theoretically, the present study was mainly based on the Spenser and Luis (2012). Observation, interview and field work were employed to collect the required data. The results indicated that clitic doubling is not a preferred process in Kalhori Kurdish. Instead, Kurdish speakers prefer to dislocate (to right or left) the relevant NP in the sentence to prevent both clitic and its related NP simultaneously.