nvee Posted November 3, 2009 Share Posted November 3, 2009 Hi there, Im not sure if this is the correct place to post this ... I am looking for a good PHP security book / Article - I see there is one on PHPFREAKS tutorials, but as a beginner, I would like to go through as much security related information as possible. Does anyone have a good article/ebook/book which you can advise me to read/get? Quote Link to comment Share on other sites More sharing options...
xylex Posted November 3, 2009 Share Posted November 3, 2009 Chris Shiflett's Essential PHP Security is a book that comes up a lot. Though it doesn't really cover file uploads or get into anything in depth. The presentations on PHP.net are also a good resource - http://talks.php.net/index.php/Security A lot of application security design isn't PHP specific, so general internet security resources are good, and even many geared towards a different language than PHP. And if you want to get really into it, the NIST CSRC has a lot of detailed discussions around security practices - http://csrc.nist.gov/index.html. Quote Link to comment Share on other sites More sharing options...
keldorn Posted November 4, 2009 Share Posted November 4, 2009 Here is the best security tip you can ever have. Never trust user input. Quote Link to comment Share on other sites More sharing options...
pastcow Posted November 13, 2009 Share Posted November 13, 2009 webappsec.org has some good content in its mailing lists Quote Link to comment Share on other sites More sharing options...
Maq Posted November 13, 2009 Share Posted November 13, 2009 Chris Shiflett's Essential PHP Security is a book that comes up a lot. Though it doesn't really cover file uploads or get into anything in depth. The presentations on PHP.net are also a good resource - http://talks.php.net/index.php/Security A lot of application security design isn't PHP specific, so general internet security resources are good, and even many geared towards a different language than PHP. And if you want to get really into it, the NIST CSRC has a lot of detailed discussions around security practices - http://csrc.nist.gov/index.html. Just an FYI, most of the articles/presentations in your first link are out dated and when you click on your second link, it's broken. It should read - http://csrc.nist.gov/index.html Quote Link to comment Share on other sites More sharing options...
JonnoTheDev Posted November 13, 2009 Share Posted November 13, 2009 The Apress books are very good. Some of them are focused towards advanced programming though. http://www.amazon.com/Pro-PHP-Security-Chris-Snyder/dp/1590595084/ref=sr_1_2?ie=UTF8&s=books&qid=1258129925&sr=8-2 Quote Link to comment Share on other sites More sharing options...
Daniel0 Posted November 13, 2009 Share Posted November 13, 2009 Just an FYI, most of the articles/presentations in your first link are out dated and when you click on your second link, it's broken. It should read - http://csrc.nist.gov/index.html His link is correct. It's SMF that is parsing the text incorrectly by not figuring out that the ending period part of the sentence and not the URL. Quote Link to comment Share on other sites More sharing options...
Maq Posted November 13, 2009 Share Posted November 13, 2009 Just an FYI, most of the articles/presentations in your first link are out dated and when you click on your second link, it's broken. It should read - http://csrc.nist.gov/index.html His link is correct. It's SMF that is parsing the text incorrectly by not figuring out that the ending period part of the sentence and not the URL. Oops Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.