News Feed
Sections




News Archive
Looking for more information on how to do PHP the right way? Check out PHP: The Right Way

Mind Tree:
Testing your web application
August 14, 2008 @ 12:04:52

This recent post from the Mind Tree blog shares a few methods for testing your web application (not unit test, just general things).

Because the Web "environment" is so diverse and contains so many forms of programmatic content, input validation and sanity checking is the key to Web applications security. This involves both identifying and enforcing the valid domain of every user-definable data element, as well as a sufficient understanding of the source of all data elements to determine what is potentially user definable.

They note that the root of most problems is input validation - most applications either just don't do it or do it poorly. They include a few tips on first security the environment the application is running in (like checking the HEAD/OPTIONS values and ensuring you're only allowing known file extensions and directories). They also mention the insecurity behind HIDDEN form elements and some issues surrounding user authentication.

0 comments voice your opinion now!
testing application input validation authentication user environment


blog comments powered by Disqus

Similar Posts

InfoWorld: Zend readies PHP applications framework

Padraic Brady's Blog: PHPMutagen: Mutation Testing for PHP5

Andi Gutmans' Blog: Zend Framework 1.6 Featuring Dojo, SOAP, Testing, and more...

Job Posting: LinkStar Interactive Seeks a Web Applications Engineer (Wexford, PA)

Nefarious Designs Blog: Virtualised Development Environments on a Mac


Community Events

Don't see your event here?
Let us know!


opinion voicesoftheelephpant introduction extension version api symfony2 laravel example framework series php7 interview conference community performance library install release podcast

All content copyright, 2015 PHPDeveloper.org :: info@phpdeveloper.org - Powered by the Solar PHP Framework