PHP security question?

Question

I just wanted to know what basic PHP security methods should I use when creating a web page that accepts articles?

I am new to PHP and wondering what will keep the fort until I am a security specialist?

Answer 1

When adopting custom text that will be displayed later, you need to consider two fronts.

First, you need to protect your database from injection attacks. There is a simple PHP function for this: mysql_real_escape_string () is usually sufficient to protect your database from injection when passing this string to the repository as a value field.

, , HTML-, , . , htmlspecialchars() . ( , , .) , Markdown, , HTML , .

, , GET/POST, . , , .

Answer 2

, , .

? ? ? SQL-? HTML? ?

Answer 3

, , , PHP .

:

• SQL Injection

. , :

• Suhosin
• eval()

Answer 4

, , , .

-, (, , WYSIWYG HTML), -, , XSS ..

HTML.

Answer 5

, , Drupal CakePHP. , , , , . , ..

Answer 6

, -.

• , , , , , .

• , , mysql , :

  if(!empty($_GET["integer_like_id_value"]){
      $integer_id_value = (int)$_GET["integer_like_id_value"];
  }else{
      // that stuff seems not to be legit, die application, log error ? whatever
      die();
  }
  

Answer 7

Top 7 PHP Security Errors

Answer 8

When your project is ready for public use, it is usually recommended to set error_reporting (0);

This will not provide more security, but it makes it difficult (usually) for bad guys to find possible security problems on your site.