March 30, 201115 yr I'm wanting to learn about security when it comes to php scripts and MySQL. I have no idea what I should be looking into first as i've never really thought about it, but i think now is the time to start swatting up. Any help please?
March 30, 201115 yr http://www.addedbytes.com/writing-secure-php/ Make sure you read ALL of the series of secure php. it's very informative
March 30, 201115 yr some good tips from the both of you will assure those are put aside for if i ever become the need to create scripts which would contain such data, i wouldnt have thought of half of them things lol rep ++
March 30, 201115 yr The PHPSec guide is well worth a read too I think: phpsec.org/projects/guide/ If you want to play it safe, I'd recommend using a framework for any applications / pages you're making publically available. CodeIgniter, for example, takes care of a lot of the potential trouble spots like XSS, Session handling, and SQL injection for you.
March 31, 201115 yr The PHPSec guide is well worth a read too I think: phpsec.org/projects/guide/ If you want to play it safe, I'd recommend using a framework for any applications / pages you're making publically available. CodeIgniter, for example, takes care of a lot of the potential trouble spots like XSS, Session handling, and SQL injection for you. The problem with using a framework is that so many of the security principles are abstracted away that it wouldn't be much of a learning exercise for the OP. The other thing with frameworks is blind faith that they've got all the security stuff sorted - which often isnt the case, or requires periodically checking for updates and bug patches. My advice would be to run through the links already posted and locally try out some of the techniques. But yes by all means use a framework on shipping code, with a fuller knowledge you've built up in your hacking you'll be able to verify the biggest vulnerabilities and make sure you're covered.
March 31, 201115 yr The Essential PHP Security book by Chris Shiflett is very useful! It's available on Amazon... - ionix
Create an account or sign in to comment