Q695 Posted October 5, 2010 Share Posted October 5, 2010 Does anyone have a good PHP security checklist to use when developing a website (i.e. reduce hacker logins, sql injections, et al)? Link to comment https://forums.phpfreaks.com/topic/215184-php-security-checklist/ Share on other sites More sharing options...
chintansshah Posted October 5, 2010 Share Posted October 5, 2010 Find checklist below. 1. SQL Injections 2. Stop Using $_REQUEST 3. Don't save plain text Password Cookies 4. register_globals = Off for more details visit http://www.kavoir.com/2010/03/php-security-checklist-for-websites-and-web-applications-bottom-line-for-every-good-php-developers.html Link to comment https://forums.phpfreaks.com/topic/215184-php-security-checklist/#findComment-1119174 Share on other sites More sharing options...
thehippy Posted October 5, 2010 Share Posted October 5, 2010 PHP Security Consortium has a good guide. They also have a environment check script phpsecinfo, check that out too. PHP|Architect has written a book/guide Guide to PHP Security O'Reilly published Essential PHP Security in '05, most types of website attacks are in it. worth having. PHP isn't the only thing you should consider when dealing with security. Think of all the components that are interacting, there is PHP of course, maybe some external libraries, external tools, a cache server, most likely a RDBMS, the filesystem (permissions), the web server, web server modules, mail agent, the operating system. There really is no end to it... Looking at all the hosting companies out there, it makes me cringe with all the software they have installed (ex. whm/cpanel). Just give me a minimal freebsd install, with jailed services. Keep It Simple and Secure Link to comment https://forums.phpfreaks.com/topic/215184-php-security-checklist/#findComment-1119212 Share on other sites More sharing options...
phpchamps Posted October 7, 2010 Share Posted October 7, 2010 The best book for this is PHP|arch - Guide to php security... http://www.phparch.com/books/phparchitects-guide-to-php-security/ Link to comment https://forums.phpfreaks.com/topic/215184-php-security-checklist/#findComment-1119742 Share on other sites More sharing options...
Recommended Posts
Archived
This topic is now archived and is closed to further replies.