News Feed
Sections




News Archive
Looking for more information on how to do PHP the right way? Check out PHP: The Right Way

ThinPHP Blog:
Understanding successful tracing of security vulnerabilities
September 21, 2006 @ 07:34:33

In this new post on the ThinkPHP blog, there's more talk about their Chorizo! security scanner and how, with a little help from their Morcilla product, you can find problems easily. Now, interpreting them is another matter, so they show you a simple way to determine just what went wrong.

Sometimes it's not very easy to check if a vulnerability occured where Morcilla told you it occured. In order to pinpoint this issue, it is neccessary that you get a deeper look to the callstack of all the functions that were involved calling the SQL abstraction layer.

They include a screenshot of how the functionality will (in the upcoming version) work in the case of a MySQL SQL injection problem.

0 comments voice your opinion now!
vulnerabilities security chorizo morcilla trace screenshot sql injection vulnerabilities security chorizo morcilla trace screenshot sql injection


blog comments powered by Disqus

Similar Posts

Community News: Day Camp 4 Developers - Programming PHP Securely

Vinu Thomas' Blog: Modifying your MySQL databases to be UTF-8 compliant

Secunia.com: CMS Mundo SQL Injection and File Upload Vulnerabilities

Zend Developer Zone: Quick Start Symfony DI (Dependency Injection) Tutorial

Derick Rethans' Blog: Xdebug and tracing memory usage


Community Events





Don't see your event here?
Let us know!


symfony introduction podcast api release laravel list interview community unittest version language threedevsandamaybe conference framework composer series voicesoftheelephpant configure opinion

All content copyright, 2015 PHPDeveloper.org :: info@phpdeveloper.org - Powered by the Solar PHP Framework