Looking for more information on how to do PHP the right way? Check out PHP: The Right Way

Paragon Initiative:
Securing a PHP Application in 2016: The Pocket Guide
Jul 11, 2016 @ 17:45:11

The Paragon Initiative has posted a new tutorial giving you a pocket guide version to securing your PHP application in 2016.

Please set aside most of what you've heard over the years; chances are, most of it just muddies the water. Security is not a product. Security is not a checklist. Security is not an absolute.

Security is a process. Security is an emergent property of a mature mindset in the face of risk.

Perfect security is not possible, but attackers do have budgets. If you raise the cost of attacking a system (your application or the networking infrastructure it depends on) so high that the entities that would be interested in defeating your security are incredibly unlikely to succeed, you'll be incredibly unlikely to be compromised.

The post talks about the "essence of security" and how most prevention methods don't even add much processing overhead or overall development time. He makes four recommendations of things to do in current and future development to help secure your applications:

  • Use PHP 7 in All New Development
  • Use HTTPS Everywhere
  • Use Security Headers
  • Use Trustworthy Reference Material

The post ends with a few other things to think about when building secure applications including raising the "cost" of attacking your system and keeping in mind that your platform may not be the attacker's "end game".

tagged: paragoninitiative secure application pocket guide top4 php7 https headers references

Link: https://paragonie.com/blog/2016/07/securing-php-application-in-2016-pocket-guide

Sebastian Bergmann's Blog:
PHPUnit 3.0 Beta 1
Oct 10, 2006 @ 12:16:11

Right on the heels of Derick Rethans' post of the first release candidate for Xdebug 2, Sebastian Bergmann has announced a beta release of his unit testing package - PHPUnit 3.

A list of features is available as well as a list of changes. You can install PHPUnit using the PEAR Installer. Note that previous installations of the PHPUnit and PHPUnit2 packages from the pear.php.net channel have to be uninstalled.

Sebastian also mentions the PHPUnit Pocket Guide published a little while back, acting as the official documentation for the project.

tagged: phpunit beta release pear installer pocket guide documentation phpunit beta release pear installer pocket guide documentation

Link:

Sebastian Bergmann's Blog:
PHPUnit 3.0 Beta 1
Oct 10, 2006 @ 12:16:11

Right on the heels of Derick Rethans' post of the first release candidate for Xdebug 2, Sebastian Bergmann has announced a beta release of his unit testing package - PHPUnit 3.

A list of features is available as well as a list of changes. You can install PHPUnit using the PEAR Installer. Note that previous installations of the PHPUnit and PHPUnit2 packages from the pear.php.net channel have to be uninstalled.

Sebastian also mentions the PHPUnit Pocket Guide published a little while back, acting as the official documentation for the project.

tagged: phpunit beta release pear installer pocket guide documentation phpunit beta release pear installer pocket guide documentation

Link:

Sebastian Bergmann's Blog:
Japanese Documentation for PHPUnit
Aug 07, 2006 @ 10:58:15

The PHPUnit Pocket Guide has been updated, according to this new post on Sebastian Bergmann's blog today - the addition of a Japanese version.

Masahiro Takagi has contributed a translation of the PHPUnit Pocket Guide, which is the official documentation for PHPUnit.

PHPUnit is one of the most popular unit testing pakcages offered for PHP today. The addition of this translation can only help push it out to even more of the world to use.

tagged: documentation japanese phpunit contribution pocket guide documentation japanese phpunit contribution pocket guide

Link:

Sebastian Bergmann's Blog:
Japanese Documentation for PHPUnit
Aug 07, 2006 @ 10:58:15

The PHPUnit Pocket Guide has been updated, according to this new post on Sebastian Bergmann's blog today - the addition of a Japanese version.

Masahiro Takagi has contributed a translation of the PHPUnit Pocket Guide, which is the official documentation for PHPUnit.

PHPUnit is one of the most popular unit testing pakcages offered for PHP today. The addition of this translation can only help push it out to even more of the world to use.

tagged: documentation japanese phpunit contribution pocket guide documentation japanese phpunit contribution pocket guide

Link:

Sebastian Bergmann's Blog:
So Long, and Thanks for all the PEARs
Jul 05, 2006 @ 22:14:13

Sebastian today announces the departure of PHPUnit from the PEAR Project.

Skirting the political issues involved, he cites the move from CVS to SVN+Trac as a major factor in his decisiont to move.

The CVS repository has been migrated to Subversion, Trac is now used to provide repository browsing, issue tracking, and wiki functionality. The PHPUnit Pocket Guide website is now proudly served by lighttpd and the DocBook/XML sources of the book are now also publically available.

Whilst shocking and somewhat tear-sheding, I hope this move doesn't set a precedence for PEAR. Sebastians technical reasons for moving are certainly decisions I have made for projects outside of PEAR and I am happy to see another project make that jump.

tagged: phpunit PEAR svn pocket guide lighttpd phpunit PEAR svn pocket guide lighttpd

Link:

Sebastian Bergmann's Blog:
So Long, and Thanks for all the PEARs
Jul 05, 2006 @ 22:14:13

Sebastian today announces the departure of PHPUnit from the PEAR Project.

Skirting the political issues involved, he cites the move from CVS to SVN+Trac as a major factor in his decisiont to move.

The CVS repository has been migrated to Subversion, Trac is now used to provide repository browsing, issue tracking, and wiki functionality. The PHPUnit Pocket Guide website is now proudly served by lighttpd and the DocBook/XML sources of the book are now also publically available.

Whilst shocking and somewhat tear-sheding, I hope this move doesn't set a precedence for PEAR. Sebastians technical reasons for moving are certainly decisions I have made for projects outside of PEAR and I am happy to see another project make that jump.

tagged: phpunit PEAR svn pocket guide lighttpd phpunit PEAR svn pocket guide lighttpd

Link:

Aaron Wormus' Blog:
PHPUnit Pocket Guide - 5 Minute Review
Nov 15, 2005 @ 11:32:08

On hiw blog today, Aaron Wormus has his quick review of the latest offering from Sebastian Bergmann and O'Reilly - the PHPUnit Pocket Guide.

At the recent International PHP Conference held in Frankfurt, Germany I was able to pick up a copy of Sebastian Bergmann's "PHPUnit Pocket Guide" a slim pocket guide published by O’Reilly which forms the most complete documentation for PHPUnit.

What I found enjoyable, was the mixture between real-world examples, Agile development methodologies and program documentation. I have never used PHPUnit style of unit testing before and while I am familiar with the concepts of Agile and Extreme programming, I would have appreciated a bit more Theory. Of course, this is a pocket guide, not "Unit Testing Unleashed" and links are provided to various sources of information on the topic, so there is plenty of information for me to look at.

He also mentions two other sections in the book - PHPUnit with Phing and with PHP4. And, of course, Aaron reminds us that the contents of the book are also a totally free download from the PHPUnit site too...

tagged: book review phpunit pocket guide book review phpunit pocket guide

Link:

Aaron Wormus' Blog:
PHPUnit Pocket Guide - 5 Minute Review
Nov 15, 2005 @ 11:32:08

On hiw blog today, Aaron Wormus has his quick review of the latest offering from Sebastian Bergmann and O'Reilly - the PHPUnit Pocket Guide.

At the recent International PHP Conference held in Frankfurt, Germany I was able to pick up a copy of Sebastian Bergmann's "PHPUnit Pocket Guide" a slim pocket guide published by O’Reilly which forms the most complete documentation for PHPUnit.

What I found enjoyable, was the mixture between real-world examples, Agile development methodologies and program documentation. I have never used PHPUnit style of unit testing before and while I am familiar with the concepts of Agile and Extreme programming, I would have appreciated a bit more Theory. Of course, this is a pocket guide, not "Unit Testing Unleashed" and links are provided to various sources of information on the topic, so there is plenty of information for me to look at.

He also mentions two other sections in the book - PHPUnit with Phing and with PHP4. And, of course, Aaron reminds us that the contents of the book are also a totally free download from the PHPUnit site too...

tagged: book review phpunit pocket guide book review phpunit pocket guide

Link:


Trending Topics: