Security

Security should be a top concern throughout the development of any PHP web application. There are some very simple measures you can take to protect your application from potential abuse. This post will cover some of the basics of PHP security.

Md5 is a very easy way to encrypt any string data. Following example take and encrypts a string. Remember that you could not dencrypt any data after encryption. .

I persume that most of them would be knowing this attack and how to prevent it, but recently when i was googling i found out many feedback form scripts to be in secure. PHP is a majuscule and secure language, but it all depends upon the programmer style of coding...
(show more)
(show less)

Silentum PasswordGen is an excellent password generator tool if you need passwords for email clients, message boards, IM programs, or any other protected pages. It has various options, including choosing whether to use lowercase/uppercase letters, numbers, symbols, and spaces, in any combination you desire. Its character limits extend between 5 and 50, and you can generate 1 to 5 passwords at a time. You can use this for your own personal use, or place it on your site to allow visitors to generate their own passwords. It runs entirely on a single PHP file, and doesn't require any MySQL....
(show more)
(show less)

When you build a form in your web page, you are susceptible to being spamed by automated systems. In order to make sure that the one who completes the form is human, you can use the system with image verification.

These are basic string encoding/decoding functions I developed for use in flat-file databases. They offer limited security to protect sensitive data from being viewed.

Redirection of addresses to your secure pages(SSL). This tutorial will guide to redirect user request from http:// to your SSL HTTPS:// with no scripting to pages. One script and it works for all your pages.

Its always a hard slog with spammers around the web. Once we have found the culprit, we generally move towards htaccess to lock the window and when its not available, we rely on the power of PHP.Lets get into the battle

This script is useful if you want to restrict the access to some people on your site, based on their IPs. There are 2 lists which can be used: one which has a list of the IPs you want to ban and one which you can use to ban a range of IPs. The script checks both lists and if the Visitor’s IP is in the list then the script will show a message to the user and exit....
(show more)
(show less)

This tutorial will show you how to create a basic bad word filter in PHP.

Md5 is a very easy way to encrypt any stirng data. Following example take and encrypts a string. Remember that you could not dencrypt any data after encryption.

This script asks the user to correctly answer a math problem before they can proceed, preventing spambots from registering or posting content to your site.

In this tutorial we'll go over some of the areas of PHP that need special attention to make sure your code protects against malicious attempts, from SQL Injection to the underestimated - XSS.

Captcha stands for "Completely Automated Public Turing test to tell Computers and Humans Apart" and is used for telling humans and computers apart. Here is a tutorial that will teach you how to create your own PHP CAPTCHA.

This tutorial will show you sanitation techiques used by the pros so that your scripts will be secure, and resistant to any attacks.

Spam-Proofing Your Website Anyone who operates their own website knows that you need to provide forms in your site for visitors to contact you. The big challenge is providing easy form access to your visitors, without letting SPAM flood your email inbox or database. The techniques described in this article tell you how to reduce the amount of SPAM. ...
(show more)
(show less)

PHP password generator is a complete, working password generation function for PHP. It allows the developer to customize the password: set its length and strength.

This tutorial is intended for both amateur and professional PHP programmers who want to design and write quality functions. To complete this tutorial, you must have a basic level of working knowledge with PHP, and know how to define functions.This will help u strengthen your codes...
(show more)
(show less)

With all the Captcha decoders these days, its impossible to build a solid Captcha image validator with a string. The solution? Have a captcha that asks simple math addition questions! Decoders are not very good at breaking these. This tutorial will show you how to make a basic math CAPTCHA validtion form. This requires that you have the GD library for PHP installed to work....
(show more)
(show less)

There are more extensive ways to do an IP address format check, but this is a good cursory check. Simply call it passing an IP address as a string and it will return true if it's valid, false if it isn't.