Developer's Guide to Web Application Security

Summary

Making sure your Web applications are secure is a due-diligence issue many adminis-

trators and programmers should undoubtedly perform—but lacking the expertise

and time to do so is sometimes an overriding factor.Therefore, it’s important to pro-

mote a simple method of secure code review anyone can tackle. Looking for specific

problem areas and then tracing the program execution in reverse provides an effi-

cient and manageable approach for wading through large amounts of code. By

focusing on high-risk areas (buffer overflows, user output, file system interaction,

external programs, and database connectivity), you can easily remove a vast number ...