Pro PHP security from application security principles to the implementation of XSS defenses

Provides information on securing PHP applications, covering such topics as SQL injection, XSS, remote execution, temporary files, REST services, CAPTCHAs, identity verification, and versioning.

Bibliographic Details
Main Author: Snyder, Chris (-)
Other Authors: Myer, Tom, Southwell, Michael G.
Format: eBook
Language:Inglés
Published: [Berkeley, Calif.] : New York : Apress ; Distributed to the book trade worldwide by Springer Science+Business Media c2010.
Edition:2nd ed
Series:The expert's voice in open source Pro PHP security
Subjects:
See on Biblioteca Universitat Ramon Llull:https://discovery.url.edu/permalink/34CSUC_URL/1im36ta/alma991009627572006719
Table of Contents:
  • Why is secure programming a concern?
  • Validating and sanitizing user input
  • Preventing SQL injection
  • Preventing cross-site scripting
  • Preventing remote execution
  • Enforcing security for temporary files
  • Preventing session hijacking
  • Securing REST services
  • Using CAPTCHAs
  • User authentication, authorization, and logging
  • Preventing data loss
  • Safe execution of system and remote procedure calls
  • Securing Unix
  • Securing your database
  • Using encryption
  • Securing network connections : SSL and SSH
  • Final recommendations.