PHP Security Guide
Most PHP applications interact with a database. This usually involves connecting to a database server and using access
credentials to authenticate:
<?php
$host = ‘example.org’;
$username = ‘myuser’;
$password = ‘mypass’;
$db = mysql_connect($host, $username, $password);
?>
This could be an example of a file called db.inc that is included whenever a connection to the database is needed. This
approach is convenient, [...]
Security
Session Fixation
Session security is a sophisticated topic, and it’s no surprise that sessions are a frequent target of attack. Most session
attacks involve impersonation, where the attacker attempts to gain access to another user’s session by posing as that user.
The most crucial piece of information for an attacker is the session identifier, because this is required [...]
Posted on November 17th, 2009 in Security
Firefox 3.6 Beta 2, the next version of Mozilla’s popular Web browser, arrives less than two weeks after the first beta of Firefox 3.6. It contains over 190 fixes to the original beta. Mozilla currently occupies about 25 percent of the browser market, according to a new study, placing it second behind Microsoft’s Internet Explorer [...]
