From the PHP-Coding-Practices.com site today, there's a new article that discusses some of the top security vulnerabilities that surround PHP applications.
PHP has allowed people with all sorts of backgrounds to put their ideas on the web. With several hundred million web pages programmed in PHP, security plays a big deal for us web programmers. In this introduction I will outline the most common security vulnerabilities in PHP scripts.
Topics include:
- All Input is Tainted
- Cross-Site Scripting
- SQL Injection
- Code Injection
- Command Injection
- Session and Cookie Security
- Securing File Access
Each has their own explanation (including code where needed) that talks about what the issue is and a hint at its solution. This post will be followed by more tutorials that will focus on each of the topics in more detail with solutions to help solve and prevent them from happening in your application.
