News Feed
Jobs Feed
Sections

Recent Jobs

News Archive
Zend Developer Zone:
PHP Security Tips #6 and #7
March 12, 2007 @ 11:38:00

Continuing in their security theme for the month of March, the Zend Developer Zone has posted two more Security Tips for PHP developers out there:

  • The first tip (#6 on their list) talks about the benefits of casting all of the values going in to your SQL queries. This helps keep you and your data away from things like nasty SQL injection issues that could result in exposure of valuable data.
  • The second tip (#7) focuses on regeneration of session IDs to help prevent fixation. They give an example of how, without it, you could inadvertently allow in unauthorized users. Thankfully, one quick function call can remedy the situation - session_regenerate_id.

Check out their full list for more great tips.

0 comments voice your opinion now!
security tip session fixation sql injection cast query security tip session fixation sql injection cast query



Similar Posts

Greg Beaver's Blog: Mac OS X ships with security hole-laden PEAR - how to upgrade immediately

Stefan Mischook's Blog: SQL insert statements in PHP

PHPit.net: Taking a first look at the AutoCRUD for PHP library

PHPEverywhere: New Improved Yummy ADOdb Session Handler

Sebastian Bergmann's Blog: SQL Puzzle


Community Events







Don't see your event here?
Let us know!


zendframework package ajax example mysql developer conference zend framework releases code security PEAR database PHP5 cakephp job book release application

All content copyright, 2008 PHPDeveloper.org :: info@phpdeveloper.org - Powered by the Solar PHP Framework