Posts tagged PHP

Ask your webhosting for Security Enhance Features – PHP hardening

Oct 30th

Posted by Tokwear in Hosting

The shared hosting model, though economical, immediately presents a security concern, since the HTTP server (for instance, Apache or Microsoft IIS) needs to have a considerable amount of control over the files and directories that are to be served to the client. If your application offers the ability to upload files posted through web forms,

,

Protecting PHP and MySQL from SQL Injection

Oct 30th

Posted by Tokwear in Hackproof How To

1) NEGATIVE INPUT FILTERS The simplest way to prevent this sort of injection is to search the SQL string for semi-colons and double dashes, and remove them before passing the statement to the database. That’s easy in an adequate application language, for example in PHP: $protectedqry = str_replace( “–”, “”, str_replace( “;”, “”, $qry ));

, ,