@phpdeveloper.org
On Chris Shiflett's blog today, he offers up some information about the three talks that he gave at the php|works conference this year.
The slides are available in PDF and Flash format:
I gave three talks at this year's phpworks conference. The most popular was PHP Security by Example, a talk that consists entirely of exercises. This approach is unique in the sense that the focus is on first exploiting vulnerable code and then fixing it. I think seeing how easy some exploits are gives people a better appreciation and understanding of the safeguards.
He talks about things like cross-site scripting, HTTP response splitting, and session fixation. I can see why, with all of the emphasis that's being put on security these days, why this talk would be the most popular...