Go Back  HTML Forums - Free Webmaster Forums and Help Forums > WEBSITE DEVELOPMENT > Server Side Programming > PHP Programming
Reload this Page If you code in PHP, and/or use Databases, READ THIS NOW!
User Name:
Password:
 

Reply
Page 1 of 2 1 2 >  
Thread Tools   Display Modes
  View First Unread
 
Old 05-21-2006, 03:59 AM
  #1
Chad Roe
Warrior (Level 8)
 
Chad Roe's Avatar
 
Join Date: Dec 2005
Location: Gadsden, Alabama
Posts: 77
iTrader: (0)
Chad Roe is an unknown quantity at this point
Post If you code in PHP, and/or use Databases, READ THIS NOW!
I happened across this article while researching PHP Security. It has some of the most important information a programmer could ever need, and is a must read for anyone who is just beginning to program or is a seasoned veteran.

http://www.addedbytes.com/security/writing-secure-php
---> Section 1 has 3 sub-sections
http://www.addedbytes.com/security/writing-secure-php-2
---> Section 2 has 3 sub-sections
http://www.addedbytes.com/security/writing-secure-php-3
---> Section 3 has 5 sub-sections
__________________

-Chad
-www.chadworkz.com
Last edited by Pegasus : 06-03-2009 at 02:24 PM. Reason: new domain
Chad Roe is offline   Add to del.icio.us Add to del.icio.us    Can you digg it?Can you digg it? Reply With Quote
Old 05-21-2006, 04:41 AM
  #2
-i-dont-know-
¿IDK? (Level ∞)
 
-i-dont-know-'s Avatar
 
Join Date: Dec 2005
Location: Oh, and here are my credit card details too =\
Posts: 2,131
iTrader: (0)
-i-dont-know- is an unknown quantity at this point
Thanks for sharing, very interesting articles. I'll make note of it for the future.
__________________
-i-dont-know- is offline   Add to del.icio.us Add to del.icio.us    Can you digg it?Can you digg it? Reply With Quote
Old 05-22-2006, 05:11 PM
  #3
scoutt
Mister Admin to you
 
scoutt's Avatar
 
Join Date: Jul 2001
Posts: 30,730
iTrader: (0)
scoutt is a jewel in the roughscoutt is a jewel in the roughscoutt is a jewel in the rough
Good post Chad, I will add it to the php faq in this forum. Although it is a old article it still provides valuable security tips.
__________________
Have a Script or Snippet you want to share?

WWW Standards: HTML 4.01, CSS2.1, CSS3, XHTML 1.0
PHP Standards: PHP Standards
scoutt is offline   Add to del.icio.us Add to del.icio.us    Can you digg it?Can you digg it? Reply With Quote
Old 05-22-2006, 05:51 PM
  #4
Piperwolf
Deity (Level 17)
 
Join Date: Mar 2006
Posts: 991
iTrader: (0)
Piperwolf is an unknown quantity at this point
Very nice, tried to hack my own site to see if I had vulnerabilities, but got nowhere, but I'm really only using phpBB and cpanel so theres not much to hack.
Piperwolf is offline   Add to del.icio.us Add to del.icio.us    Can you digg it?Can you digg it? Reply With Quote
Old 05-22-2006, 06:00 PM
  #5
scoutt
Mister Admin to you
 
scoutt's Avatar
 
Join Date: Jul 2001
Posts: 30,730
iTrader: (0)
scoutt is a jewel in the roughscoutt is a jewel in the roughscoutt is a jewel in the rough
surprising as phpBB was one of the biggest hole makers lol
__________________
Have a Script or Snippet you want to share?

WWW Standards: HTML 4.01, CSS2.1, CSS3, XHTML 1.0
PHP Standards: PHP Standards
scoutt is offline   Add to del.icio.us Add to del.icio.us    Can you digg it?Can you digg it? Reply With Quote
Old 12-09-2006, 05:25 PM
  #6
Freddy
Lord (Level 16)
 
Join Date: Jan 2006
Location: London
Posts: 587
iTrader: (0)
Freddy is an unknown quantity at this point
great read Chad! thank you
Freddy is offline   Add to del.icio.us Add to del.icio.us    Can you digg it?Can you digg it? Reply With Quote
Old 12-10-2006, 04:08 PM
  #7
GreyBoy
Lord (Level 16)
 
GreyBoy's Avatar
 
Join Date: Jun 2003
Location: Evergreen, Colorado
Posts: 684
iTrader: (0)
GreyBoy is on a distinguished road
Great links! Ive been trying to make my larger applications a little more secure.
__________________
My latest work: [ Mobile Shred Inc ] [ Wise Habitat Resources ]

My crappy portfolio:
http://splinterfreelance.carbonmade.com/
GreyBoy is offline   Add to del.icio.us Add to del.icio.us    Can you digg it?Can you digg it? Reply With Quote
Old 12-14-2006, 08:44 PM
  #8
jantje2
Novice (Level 1)
 
Join Date: Dec 2006
Posts: 1
iTrader: (0)
jantje2 is an unknown quantity at this point
Nice articles for beginning php/mysql developers! A must-read if you don't have php security knowledge yet..

Maybe the author should give it an update, as some things are outdated (i.e. the register globals 'problem'/'possible hole')
jantje2 is offline   Add to del.icio.us Add to del.icio.us    Can you digg it?Can you digg it? Reply With Quote
Old 12-14-2006, 09:05 PM
  #9
erisco
Catapulted
 
erisco's Avatar
 
Join Date: Dec 2005
Location: Within the division of zero
Posts: 5,858
iTrader: (0)
erisco will become famous soon enougherisco will become famous soon enough
Points to sig... I guess no one noticed
erisco is offline   Add to del.icio.us Add to del.icio.us    Can you digg it?Can you digg it? Reply With Quote
Old 12-15-2006, 11:35 AM
  #10
acslater323
Deity (Level 17)
 
acslater323's Avatar
 
Join Date: Dec 2005
Location: Compton
Posts: 916
iTrader: (0)
acslater323 is on a distinguished road
Excellent post, Chad. Thank you for that.
acslater323 is offline   Add to del.icio.us Add to del.icio.us    Can you digg it?Can you digg it? Reply With Quote
Old 05-27-2007, 11:27 PM
  #11
Sedativechunk
Champion (Level 13)
 
Sedativechunk's Avatar
 
Join Date: Jul 2006
Location: Irwin, PA
Posts: 241
iTrader: (0)
Sedativechunk is an unknown quantity at this point
Excellent find. Here is another site I found that has some more things you should disable in your php.ini file for better security:

http://www.claroline.net/wiki/index.php/Security

It makes me sleep better at night knowing there is added security to my site . I combined things to disable from jack daniels and this site I found with some examples of how to disable the bad features of PHP entirely. I know my sites not huge, but you can't trust any of your users as JD's site says.
__________________
Ed
Server Side Programmer, Software Developer

Kumite Kid Martial Arts | SedativeChunk | Larimer Firehall
Sedativechunk is offline   Add to del.icio.us Add to del.icio.us    Can you digg it?Can you digg it? Reply With Quote
Old 05-28-2007, 06:09 AM
  #12
themanwhowas
Paladin (Level 15)
 
themanwhowas's Avatar
 
Join Date: Nov 2006
Posts: 477
iTrader: (0)
themanwhowas is on a distinguished road
i hate those god damn users. I'll ban them all
__________________
http://www.tomyn.com
SANITY IS JUST A STATE OF MIND
themanwhowas is offline   Add to del.icio.us Add to del.icio.us    Can you digg it?Can you digg it? Reply With Quote
Old 05-28-2007, 09:36 AM
  #13
erisco
Catapulted
 
erisco's Avatar
 
Join Date: Dec 2005
Location: Within the division of zero
Posts: 5,858
iTrader: (0)
erisco will become famous soon enougherisco will become famous soon enough
Old thread o_0
erisco is offline   Add to del.icio.us Add to del.icio.us    Can you digg it?Can you digg it? Reply With Quote
Old 06-02-2007, 09:16 PM
  #14
scoutt
Mister Admin to you
 
scoutt's Avatar
 
Join Date: Jul 2001
Posts: 30,730
iTrader: (0)
scoutt is a jewel in the roughscoutt is a jewel in the roughscoutt is a jewel in the rough
Quote:
Originally Posted by erisco View Post
Old thread o_0
so, good information and I am glad he brought it back to the top.
__________________
Have a Script or Snippet you want to share?

WWW Standards: HTML 4.01, CSS2.1, CSS3, XHTML 1.0
PHP Standards: PHP Standards
scoutt is offline   Add to del.icio.us Add to del.icio.us    Can you digg it?Can you digg it? Reply With Quote
Old 06-03-2007, 11:31 AM
  #15
erisco
Catapulted
 
erisco's Avatar
 
Join Date: Dec 2005
Location: Within the division of zero
Posts: 5,858
iTrader: (0)
erisco will become famous soon enougherisco will become famous soon enough
Maybe you should sticky it, then.
erisco is offline   Add to del.icio.us Add to del.icio.us    Can you digg it?Can you digg it? Reply With Quote

Reply
Page 1 of 2 1 2 >  
« Previous Thread | Next Thread »
KEEP TABS
SPONSORS
 
Boxedart
 
 


 
Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
  
  
 
 



 
  POSTING RULES
 
 
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts
vB code is On
Smilies are On
[IMG] code is Off
HTML code is Off
Thread Tools
Display Modes
Linear Mode Linear Mode

Forum Jump

 

All times are GMT -5. The time now is 10:06 AM.
   
Network Sites: Web Tools and Resources | Web Templates | Free Webmaster Resources | Free JavaScripts | Free Clip Art | Clipart Resources |
Turnkey Website Templates | Free Fonts | HTML Help | Stock Photos | Quality Hosting | Learn Perl and CGI | Top Web Hosts | CMS Templates

Partner Sites: Free Web Templates | Webmaster Resources | Javascripts | Stock Photos | DHTML Scripts | Create a free forum | Web Hosting Reviews |Web Hosting
| Unlimited Domain Hosting

Mascot team created by Drawshop.com

Powered by vBulletin® Version 3.6.7
Copyright ©2000 - 2009, Jelsoft Enterprises Ltd.

Server Monitoring by ENIACmonitor 0.01
HTMLforums.com © Big Resources, Inc. Web Design by BoxedArt.com
vRewrite 1.5 beta SEOed URLs completed by Tech Help Forum and Chalo Na.