|
Is there really a way to do this ? Retrieving raw .php file from the server (other than getting into server's FTP account) ? Is this the reason why there are tools/script to encrypt php source code ?
If it's true, then how to protect against it ? (without...
Started by andyk on
, 6 posts
by 6 people.
Answer Snippets (Read the full thread at stackoverflow):
The only ....
Your PHP source code, that would be quite a security hole, since PHP files tend to contain databaseIf the file is served from a web server that has php interpretation enabled (via HTTP) then it will be processed.
|
|
I'm a beginner with PHP security issues. Someone reported a security issue with my code, but never gave details.
Below is a condensed version of the code. I'm using the JQuery AJAX function to send some data to the server where it's used by the PHP scandir...
Answer Snippets (Read the full thread at stackoverflow):
This might not always work because....
You could potentially obtain a listing of any files on your filesystem by posting a malicious value called 'foo' - if a value '/' was sent, you would be able to see in the HTML source all the files in your filesystem root .
|
|
Hi is there is any book on php site security and on scalability
Started by vipinsahu on
, 5 posts
by 5 people.
Answer Snippets (Read the full thread at stackoverflow):
You'll know about the books that exist specifically on PHP as....
Building Scalable Web amazon for books on PHP and security/scalability.
Not sure on a scalability one.
Essential PHP Security for a security book.
|
Ask your Facebook Friends
|
What are some guidelines for maintaining responsible session security with PHP? There's information all over the web, so it's about time it all landed in one place!
Started by saint_groceon on
, 12 posts
by 12 people.
Answer Snippets (Read the full thread at stackoverflow):
This helps prevent session hijacking....
The main problem with PHP sessions and security (besidesOne guideline is to call session_regenerate_id every time a session's security level changes.
Persistent Sessions across several servers.
|
|
Kohana and Codeigniter both have encode_php_tags() . I understand XSS cleaning (for Javascript), but when and why would you use encode_php_tags() ? What is the security threat?
Started by Abi Noda on
, 6 posts
by 6 people.
Answer Snippets (Read the full thread at stackoverflow):
Why they've listed this as a security-related function I couldn't tell you, but this pretty much just replaces the < and > in the PHP tags with their encoded forms, thus disallowing the actual PHP code between the tags to be....
|
|
Yes, I'm a beginner.
I wonder to know which are the main problems of security on a web site under PHP framework.
Can someone give some link and/or some issue list?
I would be very grateful, because I write php by some month but I have no idea about that...
Started by Vittorio Vittori on
, 9 posts
by 9 people.
Answer Snippets (Read the full thread at stackoverflow):
PHP is a language by dummies for dummiesgeneral links....
Attacks and sql injection )
-appropriate error catching
Take a look at this article also PHP Security, and this results in the extremely easy creation of security holes.
|
|
I just starting out learning PHP, I've been developing web apps in ASP.Net for a long while. I was wondering if there are any PHP specific security mistakes that I should be looking out for.
So, my question is what are the top security tips that every...
Started by Martin Brown on
, 17 posts
by 17 people.
Answer Snippets (Read the full thread at stackoverflow):
Http://htmlfixit.com/cgi-tutes/tutorial_PHP_Security_Issues.php
Avoid using register_globals....
Http://phpsec.org/
Most of the security sure you validate your input.
Here is a link of good PHP security programming practices.
|
|
I'm a PHP/MySQL noob who knows nothing about online security.
Could you point me to some resources that will aid in my knowledge? (Beginner level, please!)
Started by Kevin Brown on
, 6 posts
by 6 people.
Answer Snippets (Read the full thread at stackoverflow):
(fd: I wish PHP would go away for a variety of reasons.)
But some general rules for....
I'll suggest two with security issues.
PHP Security has resources on that and many other PHP security concerns.
To check it.
|
|
For security purposes, I would like to create a security token for every CRUD operation on a site running a LAMP stack. The security token would be attached to the a href URL and would be verified after the user clicks on the link before displaying or...
Started by chris on
, 3 posts
by 3 people.
Answer Snippets (Read the full thread at stackoverflow):
The hacker can grok your HTML and extract the href's with security tokens in them..
|
|
How secure are php Sessions? I am planning to use the native PHP sessions to authenticate users. Can users modify session data like they can $_POST and $_GET data?
Answer Snippets (Read the full thread at stackoverflow):
The next question of security....
However, PHP session cookies are a common target for cross-site scripting (XSS mode.
All the data in the session your site provides.
PHP sessions are as secure as the session cookie given to the user.
|
