[khibinite]

Hello there!

I'd like to ask advanced PHP programmers about potential security problems which are possible by development of serious PHP applications.

I heard a lot about security troubles in know PHP apps (like PHPNuke). Which aspects should I control more strong to leave such problems?

Sorry my poor English, I hope you got my base reflection.

[Stefan]

there are a lot of articles on this topic. you should do a google on "php security" or something like that.

very important things to notice are filetype checking when you have a file upload, cross site scripting issues (functions like htmlspecialchars and htmlentities are useful here) and interaction with the database (addslashes (for things going into the database) and stripslashes (for things coming out of the database) are useful here).

[khibinite]

Originally Posted by Stefan

there are a lot of articles on this topic. you should do a google on "php security" or something like that.

very important things to notice are filetype checking when you have a file upload, cross site scripting issues (functions like htmlspecialchars and htmlentities are useful here) and interaction with the database (addslashes (for things going into the database) and stripslashes (for things coming out of the database) are useful here).

Thank you, I found the subject article by John Coggeshall.