Developer's Guide to Web Application Security

Introduction

Designing a program from scratch allows you to incorporate security from the

beginning, or at least be familiar enough with the program to rationalize potential

vulnerable areas in the code. However, as an administrator or developer, you may

face various alternate situations:You may have joined a development project already

in progress, thus inheriting someone else’s code. Or you have made the decision to

use third-party code (such as an open source library or CGI application). Or, as an

administrator, you’re worried about the quality of code your internal developers are

putting on your system.

In all these situations, it really helps to ...