Current location: Hot Scripts Forums » Programming Languages » PHP » Let's talk security


Let's talk security

Reply
  #1 (permalink)  
Old 09-11-04, 11:22 AM
Mister B.'s Avatar
Mister B. Mister B. is offline
Wannabe Coder
 
Join Date: Jul 2003
Posts: 136
Thanks: 0
Thanked 0 Times in 0 Posts
Let's talk security

I want to talk about PHP security for a minute here.

I have a small website I am working on, but I don't want to spend too much time on it yet because I know very little - nothing about how to secure something.

What security measures are necesary or usefull in any way?:

Yahoo's Enter the code (Random picture here)?

Email comfirmation (Push this link)?

Using Sessions instead of Cookies?

etc.

Also, any that you would say are usefull, maybe you could give me the basic logic behind, as I am new to this stuff. I could easily set up a insecure PHP page, but I don't know why I would.
__________________
God save us from the religious fanatics
Reply With Quote
  #2 (permalink)  
Old 09-11-04, 05:15 PM
Eclipse's Avatar
Eclipse Eclipse is offline
Coding Addict
 
Join Date: May 2004
Location: Long Island, New York
Posts: 356
Thanks: 0
Thanked 0 Times in 0 Posts
Well for forms use $_POST not $_REQUEST since a request can be faked ie:
$_REQUEST['form_thinger']; the form can be left blank and ?form_thinger=value added to the url and any security could be compremised make sure that register_globals is off use sessions and cookies for the best security.
Reply With Quote
Reply

Bookmarks


Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
Security for my Website? Naresh Rohra ASP 1 08-27-04 02:07 PM
Enable Parent Path vs security ewong ASP 3 05-22-04 04:23 AM
How to supress security prompt in Mozilla browser rameshreddy74 JavaScript 0 01-13-04 11:53 PM
popping up the security box when accessing a php script andreas66 PHP 2 11-19-03 10:34 AM
PHP scripts security khibinite PHP 2 10-23-03 06:13 AM


All times are GMT -5. The time now is 04:28 AM.
vBulletin® Copyright ©2000 - 2012, Jelsoft Enterprises Ltd.