
- You are not logged in. | Login
December 20, 2006 12:26 pm
- admin
- Administrator


Discuss article: "Security in PHP. Part I"
Give your own view on that article
Discussed article: "Security in PHP. Part I"
April 10, 2007 3:21 pm
- biopd42
- Member


Re: Discuss article: "Security in PHP. Part I"
I try to draw an analogy to the files' names in the script.
This method seems to be the simplest one to me.
April 10, 2007 3:28 pm
- Mr.SMart
- Member


Re: Discuss article: "Security in PHP. Part I"
You are to limit length of input data and check presence of ‘bad’ symbols… Ideally there should be only letters/numbers, slashes, sign @ for email and http:// or ftp:// for address lines… All the rest should be excluded… And this should be done in the very beginning of the script. If something goes wrong, you simply log out with exit…
April 10, 2007 3:31 pm
- PilgrimFarAway
- Member


Re: Discuss article: "Security in PHP. Part I"
As to the forms, there is rather powerful generator/validator - BS_Forms. It makes life much easier 
April 10, 2007 3:41 pm
- mastaweb99
- Member


Re: Discuss article: "Security in PHP. Part I"
Or you can check files’ extensions for making sure that server won’t run them.
How long do binaries differ with their extensions?


