<?xml version="1.0"?>
<rss version="2.0">
  <channel>
    <title>PHPDeveloper.org</title>
    <link>http://www.phpdeveloper.org</link>
    <description>Up-to-the Minute PHP News, views and community</description>
    <language>en-us</language>
    <pubDate>Fri, 09 Jan 2009 22:35:11 -0600</pubDate>
    <ttl>30</ttl>
    <item>
      <title><![CDATA[Douglas Brown's Blog: Three Important Tips to Write PHP Code Defensively]]></title>
      <guid>http://www.phpdeveloper.org/news/11617</guid>
      <link>http://www.phpdeveloper.org/news/11617</link>
      <description><![CDATA[<p>
<i>Douglas Brown</i> has a <a href="http://www.brownphp.com/2008/12/three-important-tips-to-write-php-code-defensively/">few helpful hints</a> to help you write your PHP code defensively, protecting your code from malicious attackers.
</p>
<blockquote>
The phenomenal growth of PHP applications has also led to a mushrooming of increased quantum of malicious activity. It thus becomes imperative that you write secure PHP code to protect your website. Here are some tips for the same. The three most vulnerable aspects of PHP that can become easily accessible to anyone are XSS (Cross Site Scripting), Global Variables and SQL code.
</blockquote>
<p>
He details what each is and how you can protect your code against the problems they cause. Some example code is included to give you a better idea of the possible solution.
</p>]]></description>
      <pubDate>Tue, 23 Dec 2008 16:40:30 -0600</pubDate>
    </item>
    <item>
      <title><![CDATA[Pierre-Alain Joye's Blog: PHP Security Conference in Paris, 2007/01/29]]></title>
      <guid>http://www.phpdeveloper.org/news/7111</guid>
      <link>http://www.phpdeveloper.org/news/7111</link>
      <description><![CDATA[<p>
<i>Pierre-Alain Joye</i> has <a href="http://blog.thepimp.net/index.php/post/2007/01/16/PHP-Security-Conference-in-Paris-2007/12/29">posted a reminder</a> about an event happening on the 29th of January (2007) with <i>Damien S&eacute;guy</i> in Paris concerning PHP security.
</p>
<blockquote>
He will focus on the XSS and CSRF aspects of the web applications: sources of the vulnerabilities, attacks/exploits and the defense techniques. I will sadly not attend but such events are rare enough to be mentioned loudly.
</blockquote>
<p>
The talk is a part of <a href="http://www.afup.org/article.php3?id_article=322">this meeting</a> and requires a RVSP to attend, so if you'd like to attend, please <a href="http://www.afup.org/rdv_afup/">sign up today</a>.
</p>]]></description>
      <pubDate>Wed, 17 Jan 2007 11:54:00 -0600</pubDate>
    </item>
  </channel>
</rss>
