php

PHP 5.3 Released!

Posted by Dave on June 30, 2009 in php

PHP 5.3 has been released. Also, Eclipse Galileo was recently released as well as PDT 2.1 which has support for PHP 5.3!
The PHP development team is proud to announce the immediate release of PHP 5.3.0. This […]

New PHP Intepreter-Based XSS and SQL Security Tester

Posted by Dave on June 19, 2009 in php

Researchers from MIT, Stanford and Syracuse have developed a program named “Ardilla” which can analyze PHP code for Cross-Site Scripting (XSS) and SQL injection attack vulnerabilities. The researchers say Ardilla found 68 never-before found vulnerabilities in five different PHP applications using the tool — 23 SQL injection and 45 XSS flaws.
Ardilla is an automated tool […]

Coding Mistakes PHP Newbies Make

Posted by Dave on March 11, 2009 in php

1. Never trust user input! Doing so can lead to security issues such a hijacked sessions, SQL injection and your entire site being compromised. This goes for all of the PHP superglobals such as $_SERVER and not just $_GET, $_POST and $_REQUEST arrays. The only exception would be the $_SESSION superglobal as this persists on […]