PHPDeveloper.org http://www.phpdeveloper.org Up-to-the Minute PHP News, views and community en-us Sun, 19 May 2013 10:19:49 -0500 30 <![CDATA[IBM DeveloperWorks: Seven habits for writing secure PHP applications]]> http://www.phpdeveloper.org/news/11125 http://www.phpdeveloper.org/news/11125 The IBM DeveloperWorks site has posted some advice that can help keep you, your application and your data safe from security-related attacks.

Security in a PHP application includes remote and local security concerns. Discover the habits PHP developers should get into to implement Web applications that have both characteristics.

The habits in their list are:

  • Validate input
  • Guard your file system
  • Guard your database
  • Guard your session
  • Guard against XSS vulnerabilities
  • Guard against invalid posts
  • Protect against CSRF

Each comes with their own explanation and for some, code to help you spot the mistakes and correct them.

]]> Wed, 01 Oct 2008 10:28:55 -0500 <![CDATA[Ilia Alshanetsky's Blog: Changing of the Guard]]> http://www.phpdeveloper.org/news/8752 http://www.phpdeveloper.org/news/8752 A changing of the guard has taken place with the launch of the new branch of PHP - 5.3. Ilia Alshanetsky is no longer the release manager, instead Johannes Schlüter will be taking the lead.

From Ilia:

As per our tradition of changing Release Masters for every minor release, a new masochist, ;-) Johannes Schlüter will be taking of the role of RM for PHP 5.3 from me. I will continue to RM 5.2.X release, which has 1-2 releases in it still and will be actively maintained up until 5.3.0 is released into the wild, something that should happen early next year.

Ilia is stepping down after two years of service as release manager and, while sad to move on, is happy to see "new blood" move into the project to liven things up.

Check out Manfred Weber's comments on the change too.

]]> Mon, 01 Oct 2007 07:55:00 -0500 <![CDATA[Zend: New Version of Zend Guard to be Released (v4)]]> http://www.phpdeveloper.org/news/5154 http://www.phpdeveloper.org/news/5154 Zend Tehcnologies will be releasing tomorrow (Wed, April 12th) the latest version of their "code protection utility" - Zend Guard 4.

Zend Guard 4 offers an unprecedented level of code protection and a complete license management solution for the distribution of PHP applications. Zend improved the Guard product line to minimize the risk of reverse engineering by increasing protection during the encoding phase.

Zend Guard has two parts to it - the encoder and the license manager for your scripts. You can quickly and easily distribute your encoded scripts to the masses, and licenses can be easily updated/renewed without having to send out anything new. Some of the license options include concurrent users, time limitations, and if it needs to be server-specific or not.

Look for the release of this product tomorrow on the Zend website.

]]> Tue, 11 Apr 2006 08:00:19 -0500