The latest Security Tip has been posted on the Zend Developer Zone about the importance of the SecurityFocus newsletter.

Today's PHP security tip is short, sweet and easily actionable. It fits in well with the theme of the last one, to stay vigilant. Here's another resource for you to consider: If you are not already subscribed, you should subscribe to the Security Focus newsletter.

He links to their signup page and points out the most useful of their offerings - the BugTraq list.

BugTraq is a full disclosure moderated mailing list for the detailed discussion and announcement of computer security vulnerabilities: what they are, how to exploit them, and how to fix them.

Over on the SecurityFocus website, there's an interview posted with Stefan Esser of the Hardened-PHP Project (as interviewed by Federico Biancuzzi.

Federico Biancuzzi discussed with him how the PHP Security Response Team works, why he resigned from it, what features he plans to add to his own hardening patch, the interaction between Apache and PHP, the upcoming "Month of PHP bugs" initiative, and common mistakes in the design of well-known applications such as WordPress.

Some of the topics discussed include

• the Hardened-PHP Project
• Suhosin
• the PHP Security Response Team (his role in it and why he left)
• PHP5's security focus versus PHP4's
• and more...

Check out the full interview to have all of your questions answered.

The latest SecurityFocus Summary has been posted on the PHP Security Consortium site today, Issue #361.

Included in this issue are vulnerabilities for:

• SecurityImages Component Multiple Remote File Include Vulnerabilities
• Ajax Chat Multiple Remote Vulnerabilities
• ATutor Multiple SQL Injection Vulnerabilities
• Coppermine Photo Gallery Theme.PHP Remote File Include Vulnerability
• PHPAuction PHPAds_Path Variable Remote File Include Vulnerability
• myEvent Myevent.PHP Remote File Include Vulnerability

This is just a sampling of the issues reported, so head over to the full listing for the complete information.

The SecurityFocus summary on their site today for April 11th, 2006.

Software mentioned in this edition includes:

• PHPWebGallery
• JetPhoto
• PHPList
• ShopWeezle
• XBrite
• PHPKIT

There are several more mentioned besides those above, so be sure to check out the full report to see if any scripts you use are effected.

The PHP Security Consortium has posted four new SecurityFocus Summaries today.

• Issue #341 - including issues for WordPress, DSCounter/DSNewsletter/DSPoll PollID, and MyBB
• Issue #342 - including issues for PHPMyAdmin, SoftBB, CutePHP, and PHPWebSite
• Issue #334 - including issues for Noah's Classifieds, VBulletin, and PEHEPE Membership Management System
• Issue #340 - including issues for Navboard, PHPChamber, MyPhPim, and PHPNuke

As always, the latest issues are available from the Consortium's website under the Projects > SecurityFocus Summaries portion of the site. Check out the latest so you and your applications are protected.

The PHP Security Consortium has posted several SecurityFocus summaries on its site today dealing with a variety of applications and issues:

• Issue #340 - including apps like VBilletin, Noah's Classifieds, VBZoom, and Limbo
• Issue #339 - including apps like PHP-Nuke, PHPWebSite, PEAR::Archive_Tar, and Mambo
• Issue #338 - including apps like SquirrelMail, ADOdb, PostNuke, and MyBB
• Issue #337 - including apps like PHP Event Calendar, RunCMS, Invision Power Board, and PHPNuke
• Issue #336
• Issue #335
• Issue #332
• Issue #331
• Issue #330
• Issue #329
• Issue #328

The lists presented here are by no means comprehensive, so please check out the latest SecurityFocus summaries for a complete listing of all affected applications.

The PHP Security Consortium has posted more SecurityFocus Summaries on their site today:

• #327 - includes issues with Drupal, PHPWordPress, WebCalendar, and KBase Express
• #328 - includes issues with PHPMyAdmin, Web4Future, PHPForumPro, and MyBB
• #333 - includes issues with Venom Board, Andromeda, MyPhPim, and PHP Toolkit
• #334 - includes issues with GeoBlog, microBlog, AOblogger, and My Amazon Store

Of course, there are many, many more issues in each of these items than are psoted here, so be sure to check out 1 comment voice your opinion now!
securityfocus summaries posted four 333 334 328 327 securityfocus summaries posted four 333 334 328 327