Beginning PHP and MySQL: From Novice to Professional, Third Edition

CHAPTER 21Secure PHP Programming

Any Web site can be thought of as a castle under constant attack by a sea of barbarians. And as the history of both conventional and information warfare shows, often the attackers' victory isn't entirely dependent upon their degree of skill or cunning, but rather on an oversight by the defenders. As keepers of the electronic kingdom, you're faced with no small number of potential ingresses from which havoc can be wrought, perhaps most notably the following:

Software vulnerabilities:

Web applications are constructed from numerous technologies, typically a database server, a Web server, and one or more programming languages, all of which could be running on one or more operating systems. Therefore, it's crucial ...