Web Publishing with PHP and FileMaker

Appendix B. Security Concerns

IN THIS APPENDIX

• Introduction

• Filter All Incoming Data

• Keep Connection Info Above the Web Root Directory

• Do Not Report Errors to the Browser

Introduction

Securing a web application can seem a daunting task to a newbie web developer in what might seem to be a sea of experienced hackers. However, you can do several simple things to ensure a reasonable level of safety.

Some are so obvious that they can sometimes be overlooked: Lock the door to your server room, don’t give out the admin password to the server machine, and don’t forget to keep your backups in a secure location. These sorts of things will probably be out of your control if you are renting a web server, but they are good to keep in mind for future ...