In the third part of a series from the O'Reilly Network this morning, John Coggeshall returns to show all of the PHP coders out there just what security in PHP really is.
In Part 1 and Part 2 of this series, he lays a stable foundation for keeping your code safe - and continues it with Part 3. Some of the suggestions he presents in this edition include: Logging and Security, Setting the Error Reporting Level, and Custom Error Handlers. Logging and error reporting go hand in hand to help you keep your scripts safe, and to keep the errors in your code to a minimum.
Of course, you can only learn so much without experience, and I think he sums it up nicely: In the end, any text (including this one) can only teach you so much. Once you have learned the basic concepts, such as logging and data validation, it is up to you to apply them to your application. Diligence and careful attention to detail are the best tools any developer has to ensure the security of his applications.




