Pro PHP security from application security principles to the implementation of XSS defenses

Provides information on securing PHP applications, covering such topics as SQL injection, XSS, remote execution, temporary files, REST services, CAPTCHAs, identity verification, and versioning.

Detalles Bibliográficos
Autor principal: Snyder, Chris (-)
Otros Autores: Myer, Tom, Southwell, Michael G.
Formato: Libro electrónico
Idioma:Inglés
Publicado: [Berkeley, Calif.] : New York : Apress ; Distributed to the book trade worldwide by Springer Science+Business Media c2010.
Edición:2nd ed
Colección:The expert's voice in open source Pro PHP security
Materias:
Ver en Biblioteca Universitat Ramon Llull:https://discovery.url.edu/permalink/34CSUC_URL/1im36ta/alma991009627572006719
Tabla de Contenidos:
  • Why is secure programming a concern?
  • Validating and sanitizing user input
  • Preventing SQL injection
  • Preventing cross-site scripting
  • Preventing remote execution
  • Enforcing security for temporary files
  • Preventing session hijacking
  • Securing REST services
  • Using CAPTCHAs
  • User authentication, authorization, and logging
  • Preventing data loss
  • Safe execution of system and remote procedure calls
  • Securing Unix
  • Securing your database
  • Using encryption
  • Securing network connections : SSL and SSH
  • Final recommendations.