Comments on Writing Secure PHP - AddedBytes.com

Comment on Writing Secure PHP

2008-09-23T12:34:37+01:00

Comment by Hamman Samuel ( http://samuel.sveit.com )

This is a super site, especially this article on PHP security. I'm kind of an intermediate programmer in PHP and am just starting to learn about security. This was more comprehensive than all my searches of the previous 2-3 months! Would you believe I got to this site while searching for a regular expression cheat sheet! 2-in-1 :)

Comment on Writing Secure PHP

2008-09-19T05:53:45+01:00

Comment by Rajassegarin ( http://www.ipodvideos.in )

It's really a very good article. All the PHP learners should aware of these attacks. Thanks for the nice post.

Comment on Writing Secure PHP

2008-09-11T15:32:03+01:00

Comment by Joe ( http://codertips.com )

You may want to write about the new PDO class in PHP which can sanitize SQL queries for you. It is useful to learn and a lot of languages use similar features.

Comment on Writing Secure PHP

2008-09-05T07:15:19+01:00

Comment by web development & programming ( http://www.amcoitsystems.com )

Hi, I am project Manager and i delivered this blog to my PHP developer because i found great stuff.Thanks

Comment on Writing Secure PHP

2008-08-29T07:30:17+01:00

Comment by My Webiste Adviser ( http://www.mywebsiteadviser.com )

SQL injection is a serious problem, you can add additional checks:

$_GET['userid'] = str_replace("'", "", $_GET['userid']);
Remove all ' symbols from the userid string.

$_GET['userid'] = str_replace(" ", "", $_GET['userid']);
Remove all spaces from the userid string.

$_GET['userid'] = trim( htmlspecialchars(addslashes($_GET['userid'])) );
Returns a string with backslashes before special characters and change special character (for example from & to &

All these steps will prevent your website from running malicious SQL scripts.

Comment on Writing Secure PHP

2008-07-19T02:26:33+01:00

Comment by patrickd ( http://infoos.net )

thnx! you got great stuffs in here guys. learned a l0t

Comment on Writing Secure PHP

2008-05-16T06:23:41+01:00

Comment by Phillip ( http://humanbagel.com )

Decent list, but doesn't cover XSS, which is the most common exploit today.
Fix the SQL injection with the addslashes() function, easy fix. XSS is more difficult, but can be done with open source functions

Comment on Writing Secure PHP

2008-04-04T10:37:27+01:00

Comment by mohamed rami ( )

Thanks Alot for This Article ,its very
usefull

Comment on Writing Secure PHP

2008-03-27T13:55:27+00:00

Comment by Alex Tokar ( http://www.atokar.net/ )

Very nice article for new PHP developers.

Comment on Writing Secure PHP

2008-02-27T20:42:42+00:00

Comment by techguide ( http://http://www.devanggandhi.net/ )

I am new to PHP and this was really helpful