CyberPhreak
Jr. Member
Points: 0
 Offline
Posts: 46
Delphi lover
|
 |
« on: December 19, 2006, 17:31:43 » |
|
1. PHP and Security
2. Site Defacement
3. Externally working with variables
4. File Access
5. Encryption
6. Cookie Encryption
7. Protecting Scripts
8. One-way Password Authentication
Section 1: PHP and Security
While most of the world focuses on crackers gaining access to websites from bugs in the web server amongst other things, the major flaws that simply running PHP on your system can cause go unnoticed. Most new PHP users, and probably some veteran ones, don't fully understand the holes that can be readily opened by a single ill-written PHP script. You may think opening a local file on your system is secure, but is it? We'll explore this and other exploits later in this tutorial.
PHP is a very forgiving language, and with this (if not because of it), it is very easy to design PHP programs that have bugs or undesirable consequences. Bugs are easier to implement in PHP programs mainly because of the way it handles variables. Not only can different types of variables be loosely assigned to one another, but also PHP doesn
|
News
