News Feed
Jobs Feed
Sections




News Archive
Looking for more information on how to do PHP the right way? Check out PHP: The Right Way

PHPBuilder.com:
Use the PHP Filter Extension to Validate User Data
November 15, 2010 @ 09:35:30

On PHPBuilder.com there's a recent tutorial posted abut using the filter extension (now a part of the PHP core since 5.2) to filter and validate incoming user data.

With so much potential for distraction, it's no wonder that developers continue to fall victim to the very same security gaffes that have afflicted the community for well over a decade. Notably, failure to properly validate user input remains the single most serious security issue, with several of the Open Web Application Security Project's top ten security risks originating directly from this oversight.

He shows how much of an issue improperly escaped data can cause and how to validate a few different kinds of data like alphanumeric string and integers. He also mentions using prepared statements or the Zend_Filter component of the Zend Framework.

1 comment voice your opinion now!
filter user input tutorial zendfulter preparedstatement extension


blog comments powered by Disqus

Similar Posts

NETTUTS.com: Techniques for Mastering cURL

Jakub Zalas' Blog: Mocking Symfony Container services in Behat scenarios with Mockery

NetTuts.com: Basecamp Style Subdomains With CodeIgniter

Boston PHP User Group: February 2006 Meeting - 7th @ 6:30pm

DevShed: Working with the XDebug extension's var_dump() function


Community Events











Don't see your event here?
Let us know!


symfony2 project language podcast release composer example security unittest performance component framework facebook database application install package hack introduction hhvm

All content copyright, 2014 PHPDeveloper.org :: info@phpdeveloper.org - Powered by the Solar PHP Framework