PHP Security

Give me your thoughts on the best info

[IamStang]

Hello,

I am fairly new to the php scene but have managed to learn quite a bit from you folks and other resources on the web. I have developed a few scripts that actually work. LOL.

I ran across a post on here mentioning Chris Shiflett and took a trip over to his site [shiflett.org]. He has some intriguing articles on the security of php scripts. However, he doesn't get into much detail as it would seem he writes for a more advanced crowd.

Anyway, what I am looking for now is more information on securing these scripts. Know a good book? Maybe a good website? By all means, let me know!

Thanks in advance!
Take care,
IamStang

[mcibor]

For a starter you can look into the webmasterworld library and see the
PHP Security [webmasterworld.com]
also less security concerned, but otherwise very good
Bag of tricks [webmasterworld.com]
other security [webmasterworld.com]

Hope this gets you started!
Best regards
Michal Cibor

[jatar_k]

if you have specific or general concerns you can always just post them. ;)

[IamStang]

mcibor

Thanks for the links mcibor! They are appreciated. I will take a look at those really soon.

jatar_k

Nothing specific as of yet. Just thought that since I am in the beginning stages of learning php, I might as well learn it the secure way. If I learn to write the code secure to begin with, I should be less apt to error later on due to bad habits. Correct?

Makes sense to me anyways.. LOL

Thanks!
IamStang