Pro PHP Security: From Application Security Principles to the Implementation of XSS Defenses, Second Edition

P A R T  2

Practicing Secure PHP Programming

In Part 1, you saw a brief overview of the importance of security. In Part 2, we discuss making your PHP code as secure as humanly possible.

Providing that security can take some care and ingenuity, because PHP is a powerful and flexible language that deliberately stays out of the way. Instead of going ahead to do things that you haven't told it to do, it does exactly what you tell it to, no more and no less, even if you happen to overlook something that could make your application more secure.

We know that no online application can ever be completely secure; the Internet is too open an environment ...