|
Is there really a way to do this ? Retrieving raw .php file from the server (other than getting into server's FTP account) ? Is this the reason why there are tools/script to encrypt php source code ?
If it's true, then how to protect against it ? (without...
Started by andyk on
, 6 posts
by 6 people.
Answer Snippets (Read the full thread at stackoverflow):
The only ....
Your PHP source code, that would be quite a security hole, since PHP files tend to contain databaseIf the file is served from a web server that has php interpretation enabled (via HTTP) then it will be processed.
|
|
I'm a beginner with PHP security issues. Someone reported a security issue with my code, but never gave details.
Below is a condensed version of the code. I'm using the JQuery AJAX function to send some data to the server where it's used by the PHP scandir...
Answer Snippets (Read the full thread at stackoverflow):
This might not always work because....
You could potentially obtain a listing of any files on your filesystem by posting a malicious value called 'foo' - if a value '/' was sent, you would be able to see in the HTML source all the files in your filesystem root .
|
|
Hi is there is any book on php site security and on scalability
Started by vipinsahu on
, 5 posts
by 5 people.
Answer Snippets (Read the full thread at stackoverflow):
You'll know about the books that exist specifically on PHP as....
Building Scalable Web amazon for books on PHP and security/scalability.
Not sure on a scalability one.
Essential PHP Security for a security book.
|
Ask your Facebook Friends
|
Kohana and Codeigniter both have encode_php_tags() . I understand XSS cleaning (for Javascript), but when and why would you use encode_php_tags() ? What is the security threat?
Started by Abi Noda on
, 6 posts
by 6 people.
Answer Snippets (Read the full thread at stackoverflow):
Why they've listed this as a security-related function I couldn't tell you, but this pretty much just replaces the < and > in the PHP tags with their encoded forms, thus disallowing the actual PHP code between the tags to be....
|
|
Yes, I'm a beginner.
I wonder to know which are the main problems of security on a web site under PHP framework.
Can someone give some link and/or some issue list?
I would be very grateful, because I write php by some month but I have no idea about that...
Started by Vittorio Vittori on
, 9 posts
by 9 people.
Answer Snippets (Read the full thread at stackoverflow):
PHP is a language by dummies for dummiesgeneral links....
Attacks and sql injection )
-appropriate error catching
Take a look at this article also PHP Security, and this results in the extremely easy creation of security holes.
|
|
I'm a PHP/MySQL noob who knows nothing about online security.
Could you point me to some resources that will aid in my knowledge? (Beginner level, please!)
Started by Kevin Brown on
, 6 posts
by 6 people.
Answer Snippets (Read the full thread at stackoverflow):
(fd: I wish PHP would go away for a variety of reasons.)
But some general rules for....
I'll suggest two with security issues.
PHP Security has resources on that and many other PHP security concerns.
To check it.
|
|
For security purposes, I would like to create a security token for every CRUD operation on a site running a LAMP stack. The security token would be attached to the a href URL and would be verified after the user clicks on the link before displaying or...
Started by chris on
, 3 posts
by 3 people.
Answer Snippets (Read the full thread at stackoverflow):
The hacker can grok your HTML and extract the href's with security tokens in them..
|
|
How secure are php Sessions? I am planning to use the native PHP sessions to authenticate users. Can users modify session data like they can $_POST and $_GET data?
Answer Snippets (Read the full thread at stackoverflow):
The next question of security....
However, PHP session cookies are a common target for cross-site scripting (XSS mode.
All the data in the session your site provides.
PHP sessions are as secure as the session cookie given to the user.
|
|
As a web developer I am using PHP and I know that I have to worry about security but when you use a framework, there is a lot-of code and design that you relay on but that you didn't code or design and for instance I am using CakePHP.
so in this case ...
Started by Ayoub on
, 4 posts
by 4 people.
Answer Snippets (Read the full thread at stackoverflow):
Index.php/Category:OWASP_Enterprise_Security_API#tab=PHP
It is not a framework per se, but doesYou should always continue respecting the basic principles of security :
don't trust the user never dealing with security in an....
|
|
What is the best way to secure an intranet website developed using PHP from outside attacks?
Started by jericho on
, 7 posts
by 7 people.
Answer Snippets (Read the full thread at stackoverflow):
Recommendations First and foremost....
If you forget.
Read everything that Bruce Schneier has written on security and encryption.
Input validation & whistles.
Also dont ignore the usual security and best practices.
From the php app itself.
|
