PHP Security considerations, a quick reference for the newbies.

Passing RAW globals to mysql! ie. $sql = “SELECT * FROM users WHERE email=’.$_GET[’email’].”‘ and password=’”.$_GET[’password’]”‘” $result = mysql_query($sql);. So what is wrong with the above? SQL INJECTION welcome to a world where …
iis securityiis security
Read the original here: PHP Security considerations, a quick reference for the newbies.
considerations injection mysql mysql real […]

Let’s get this show on the road

By that, I mean if you leave an opening, some sod will exploit it at the worst possible time. Users should never gain access to any file without proven authentication (except maybe the Login User or Register User views) and never be …
advisory black hat blog commentary control focussed advisory […]