<?xml version="1.0"?>
<rss version="2.0">
  <channel>
    <title>PHPDeveloper.org</title>
    <link>http://www.phpdeveloper.org</link>
    <description>Up-to-the Minute PHP News, views and community</description>
    <language>en-us</language>
    <pubDate>Sat, 25 May 2013 07:49:58 -0500</pubDate>
    <ttl>30</ttl>
    <item>
      <title><![CDATA[PHPBuilder.com: Use the PHP Filter Extension to Validate User Data]]></title>
      <guid>http://www.phpdeveloper.org/news/15430</guid>
      <link>http://www.phpdeveloper.org/news/15430</link>
      <description><![CDATA[<p>
On PHPBuilder.com there's a <a href="http://www.phpbuilder.com/columns/PHP-Filter-Extension/Jason_Gilmore11112010.php3">recent tutorial posted</a> abut using the <a href="http://us2.php.net/manual/en/intro.filter.php">filter extension</a> (now a part of the PHP core since 5.2) to filter and validate incoming user data. 
</p>
<blockquote>
With so much potential for distraction, it's no wonder that developers continue to fall victim to the very same security gaffes that have afflicted the community for well over a decade. Notably, failure to properly validate user input remains the single most serious security issue, with several of the <a href="http://www.owasp.org/index.php/Category:OWASP_Top_Ten_Project">Open Web Application Security Project</a>'s top ten security risks originating directly from this oversight.
</blockquote>
<p>
He shows how much of an issue improperly escaped data can cause and how to validate a few different kinds of data like alphanumeric string and integers. He also mentions using <a href="http://php.net/manual/en/mysqli.prepare.php">prepared statements</a> or the <a href="http://framework.zend.com/manual/en/zend.filter.html">Zend_Filter</a> component of the Zend Framework.
</p>]]></description>
      <pubDate>Mon, 15 Nov 2010 09:35:30 -0600</pubDate>
    </item>
  </channel>
</rss>
