The latest Security Tip has been posted on the Zend Developer Zone about the importance of the SecurityFocus newsletter.

Today’s PHP security tip is short, sweet and easily actionable. It fits in well with the theme of the last one, to stay vigilant. Here’s another resource for you to consider: If you are not already subscribed, you should subscribe to the Security Focus newsletter.

He links to their signup page and points out the most useful of their offerings - the BugTraq list.

BugTraq is a full disclosure moderated mailing list for the detailed discussion and announcement of computer security vulnerabilities: what they are, how to exploit them, and how to fix them.

The latest Security Tip has been posted on the Zend Developer Zone about the importance of the SecurityFocus newsletter.

Today’s PHP security tip is short, sweet and easily actionable. It fits in well with the theme of the last one, to stay vigilant. Here’s another resource for you to consider: If you are not already subscribed, you should subscribe to the Security Focus newsletter.

He links to their signup page and points out the most useful of their offerings - the BugTraq list.

BugTraq is a full disclosure moderated mailing list for the detailed discussion and announcement of computer security vulnerabilities: what they are, how to exploit them, and how to fix them.

Over on the SecurityFocus website, there's an interview posted with Stefan Esser of the Hardened-PHP Project (as interviewed by Federico Biancuzzi.

Federico Biancuzzi discussed with him how the PHP Security Response Team works, why he resigned from it, what features he plans to add to his own hardening patch, the interaction between Apache and PHP, the upcoming "Month of PHP bugs" initiative, and common mistakes in the design of well-known applications such as WordPress.

Some of the topics discussed include

• the Hardened-PHP Project
• Suhosin
• the PHP Security Response Team (his role in it and why he left)
• PHP5's security focus versus PHP4's
• and more...

Over on the SecurityFocus website, there's an interview posted with Stefan Esser of the Hardened-PHP Project (as interviewed by Federico Biancuzzi.

Federico Biancuzzi discussed with him how the PHP Security Response Team works, why he resigned from it, what features he plans to add to his own hardening patch, the interaction between Apache and PHP, the upcoming "Month of PHP bugs" initiative, and common mistakes in the design of well-known applications such as WordPress.

Some of the topics discussed include

• the Hardened-PHP Project
• Suhosin
• the PHP Security Response Team (his role in it and why he left)
• PHP5's security focus versus PHP4's
• and more...

The latest SecurityFocus Summary has been posted on the PHP Security Consortium site today, Issue #361.

Included in this issue are vulnerabilities for:

• SecurityImages Component Multiple Remote File Include Vulnerabilities
• Ajax Chat Multiple Remote Vulnerabilities
• ATutor Multiple SQL Injection Vulnerabilities
• Coppermine Photo Gallery Theme.PHP Remote File Include Vulnerability
• PHPAuction PHPAds_Path Variable Remote File Include Vulnerability
• myEvent Myevent.PHP Remote File Include Vulnerability

This is just a sampling of the issues reported, so head over to the full listing for the complete information.

The latest SecurityFocus Summary has been posted on the PHP Security Consortium site today, Issue #361.

Included in this issue are vulnerabilities for:

• SecurityImages Component Multiple Remote File Include Vulnerabilities
• Ajax Chat Multiple Remote Vulnerabilities
• ATutor Multiple SQL Injection Vulnerabilities
• Coppermine Photo Gallery Theme.PHP Remote File Include Vulnerability
• PHPAuction PHPAds_Path Variable Remote File Include Vulnerability
• myEvent Myevent.PHP Remote File Include Vulnerability

This is just a sampling of the issues reported, so head over to the full listing for the complete information.

The <a href="http://www.phpsec.orgPHP Security Consortium has posted their latest SecurityFocus summary on their site today for April 11th, 2006.

Software mentioned in this edition includes:

• PHPWebGallery
• JetPhoto
• PHPList
• ShopWeezle
• XBrite
• PHPKIT

There are several more mentioned besides those above, so be sure to check out the full report to see if any scripts you use are effected.

The <a href="http://www.phpsec.orgPHP Security Consortium has posted their latest SecurityFocus summary on their site today for April 11th, 2006.

Software mentioned in this edition includes:

• PHPWebGallery
• JetPhoto
• PHPList
• ShopWeezle
• XBrite
• PHPKIT

There are several more mentioned besides those above, so be sure to check out the full report to see if any scripts you use are effected.

The PHP Security Consortium has posted four new SecurityFocus Summaries today.

• Issue #341 - including issues for WordPress, DSCounter/DSNewsletter/DSPoll PollID, and MyBB
• Issue #342 - including issues for PHPMyAdmin, SoftBB, CutePHP, and PHPWebSite
• Issue #334 - including issues for Noah's Classifieds, VBulletin, and PEHEPE Membership Management System
• Issue #340 - including issues for Navboard, PHPChamber, MyPhPim, and PHPNuke

As always, the latest issues are available from the Consortium's website under the Projects > SecurityFocus Summaries portion of the site. Check out the latest so you and your applications are protected.

The PHP Security Consortium has posted four new SecurityFocus Summaries today.

• Issue #341 - including issues for WordPress, DSCounter/DSNewsletter/DSPoll PollID, and MyBB
• Issue #342 - including issues for PHPMyAdmin, SoftBB, CutePHP, and PHPWebSite
• Issue #334 - including issues for Noah's Classifieds, VBulletin, and PEHEPE Membership Management System
• Issue #340 - including issues for Navboard, PHPChamber, MyPhPim, and PHPNuke

As always, the latest issues are available from the Consortium's website under the Projects > SecurityFocus Summaries portion of the site. Check out the latest so you and your applications are protected.