sxiix Posted December 18, 2008 Share Posted December 18, 2008 I made something that uses PHP, MySQL, AJAX, and Javascript. I generally avoided security and efficiency during its creation. Of course, now I have to focus on them. Where do web developers find resources? Consumer level books? I'm talking about guys who make enterprise level systems. Quote Link to comment https://forums.phpfreaks.com/topic/137611-solved-security-and-efficiency-resources/ Share on other sites More sharing options...
premiso Posted December 18, 2008 Share Posted December 18, 2008 It all depends on what type of security you want? AJAX, jQuery is very secure with examples of how to properly secure code. Generally speaking, mysql_real_escape_string on data coming from a form in the database is best practice, and any checks you do with javascript do again before entering them into a database. Also look into html_entities for comments and what not to prevent XSS injection etc. As far as books, I have no clue if there are any, if there are I dunno how good/accurate they are. Quote Link to comment https://forums.phpfreaks.com/topic/137611-solved-security-and-efficiency-resources/#findComment-719274 Share on other sites More sharing options...
Maq Posted December 18, 2008 Share Posted December 18, 2008 This is an odd question. I'm talking about guys who make enterprise level systems. So you, or the guys, developed enterprise level systems that aren't efficient OR secure? Where do web developers find resources? Google, tutorials, development standards, books etc... Consumer level books? Amazon.com? Quote Link to comment https://forums.phpfreaks.com/topic/137611-solved-security-and-efficiency-resources/#findComment-719276 Share on other sites More sharing options...
sxiix Posted December 18, 2008 Author Share Posted December 18, 2008 It all depends on what type of security you want? Strong security, what else would I want? As far as books, I have no clue if there are any, if there are I dunno how good/accurate they are. I can't imagine guys who make huge development projects to be scrounging around forums asking questions. PHP.net is good, but only if you know what you're looking for, like specific functions. Let's be very bold here: Google-level developers. Where do they get their information? Even schooling is based on books. Quote Link to comment https://forums.phpfreaks.com/topic/137611-solved-security-and-efficiency-resources/#findComment-719279 Share on other sites More sharing options...
sxiix Posted December 18, 2008 Author Share Posted December 18, 2008 This is an odd question. I'm talking about guys who make enterprise level systems. So you, or the guys, developed enterprise level systems that aren't efficient OR secure? No, but I'd like to learn from the best of the best. All the resources I'm finding seem to be like puzzle pieces. Is this really how development research works? Quote Link to comment https://forums.phpfreaks.com/topic/137611-solved-security-and-efficiency-resources/#findComment-719281 Share on other sites More sharing options...
premiso Posted December 18, 2008 Share Posted December 18, 2008 Let's be very bold here: Google-level developers. Where do they get their information? Even schooling is based on books. You want to know the truth? They get it from learning the language and "googling" exploits. The only way to know your code is secure is to learn from other people's mistakes honestly. An exploit is unknown to most until someone actively "stumbles" upon one. Like I said before, as long as you follow PHP standards, do not allow register_globals to be on and code for it not being on, defining your values verifying your data before you execute it or insert it into a DB, and making sure you are not on a shared host (those are just security flaws in their self) and making sure your server box is secure it is all relevant. Honestly you would just be wasting money buying a book. http://www.google.com/search?hl=en&q=php+security&btnG=Search Should provide you with more than enough information. I would bet, 100 times over that any book you buy will not have every security and it is outdated with PHP 4 or even PHP 3 code. But if you want to waste money on it... http://www.google.com/search?hl=en&q=php+security+books&btnG=Search Google is your key friend. Quote Link to comment https://forums.phpfreaks.com/topic/137611-solved-security-and-efficiency-resources/#findComment-719283 Share on other sites More sharing options...
sxiix Posted December 18, 2008 Author Share Posted December 18, 2008 Let's be very bold here: Google-level developers. Where do they get their information? Even schooling is based on books. You want to know the truth? They get it from learning the language and "googling" exploits. The only way to know your code is secure is to learn from other people's mistakes honestly. An exploit is unknown to most until someone actively "stumbles" upon one. Like I said before, as long as you follow PHP standards, do not allow register_globals to be on and code for it not being on, defining your values verifying your data before you execute it or insert it into a DB, and making sure you are not on a shared host (those are just security flaws in their self) and making sure your server box is secure it is all relevant. Honestly you would just be wasting money buying a book. http://www.google.com/search?hl=en&q=php+security&btnG=Search Should provide you with more than enough information. I would bet, 100 times over that any book you buy will not have every security and it is outdated with PHP 4 or even PHP 3 code. But if you want to waste money on it... http://www.google.com/search?hl=en&q=php+security+books&btnG=Search Google is your key friend. Alright, I figured this was how it all worked. Just had to be sure. Quote Link to comment https://forums.phpfreaks.com/topic/137611-solved-security-and-efficiency-resources/#findComment-719293 Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.