Skills Matter : Yahoo! Developer Network:PHP Security

HOME

SCALA & F#

JAVA

.NET

WEB

GROOVY & GRAILS

ANDROID & IOS

NOSQL

ARCHITECTURE

AGILE & SCRUM

AGILE DEVELOPER

Yahoo! Developer Network:PHP Security

PHP Security
In this Yahoo Developer Night Jose gives a talk on PHP Security, demonstrating the most common security issues, how to exploit them and how to protect an application against them. This is a great talk for anyone who writes web applications in PHP. The basic premise is that you automatically distrust any input that comes from the user.

Jose goes through all of the main hacking techniques used to break into PHP web applications and how dangerous it can be if your website contains any of the commonly exploited issues. The techniques illustrated are:

XSS (Cross Site Scripting) – Inserting content into a page

SQL Injection – Executing SQL statements on the server

File Uploads – Allowing the user to upload a file and how this can be exploited.

General configuration issues

Jose also illustrates how quickly a website can be broken if it’s not secure in relation to any of these techniques. The talk is very informative and useful to anyone involved in PHP applications. It definitely makes you think twice when dealing with user input.

ABOUT JOSE PALAZON

Jose Palazon (palako) is responsible for Mobile security worldwide at Yahoo!. He is 8+ years experienced in security advisory and...
More about Jose Palazon

ABOUT THE YAHOO! DEVELOPER NETWORK

The Yahoo! Developer Network offers Web Services and APIs that make it easy for developers to build applications and mashups. Yahoo! APIs let developers tap into Yahoo!'s world-class data and infrastructure to help power their businesses and integrate data sources in new ways, making the web a more useful and interesting place for everyone.
More about the Yahoo! Developer Network

PODCAST PHP SECURITY

SPONSORS

JAVASCRIPT & HTML5 COURSES

	BRIAN SLETTEN'S SEMANTIC WEB BOOTCAMP
	CHRISTOPHE HERREMAN'S SPRING ACTIONSCRIPT COURSE
	DAMJAN VUJNOVIC'S ADVANCED JAVASCRIPT WORKSHOP
	DAVID A. BLACK'S RUBY BOOTCAMP
	DAVID POLLAK'S LIFT BASICS
	DMITRY BUZDIN'S ADVANCED GOOGLE WEB TOOLKIT
	GAVIN BELL'S SOCIAL APPLICATIONS
	MARK BIRBECK'S RDFA THEORY AND PRACTICE
	MATTHEW BAXTER-REYNOLDS' PHONEGAP/APACHE CORDOVA
	PETER LUBBERS' HTML5 MOBILE MASTERY
	PETER LUBBERS' HTML5 PERFORMANCE & WEBSOCKETS
	RUSSEL WINDER'S PYTHON WORKSHOP
	TYPESAFE'S FAST TRACK TO PLAY

JAVASCRIPT & HTML5 PODCASTS

	Cross-Platform Mobile Apps Christophe Coenraets : 24th May 2012
	Native vs HTML5 Paul Ardeleanu : 22nd May 2012
	JavaScript with Gradle Luke Daley : 22nd May 2012
	Ruby’s bin men: a closer look at the gar Elise Huard : 14th May 2012
	Dependency Injection Tom Stuart : 14th May 2012
	CouchDB at the Hut Group Tom McMillen : 9th May 2012
	The Couchbase Server Tutorial John Zablocki : 9th May 2012
	Etherpad Lite Peter Martischka : 8th May 2012
	Buster.js and Phantom.js Tiago Rodriguez : 8th May 2012
	Is Everything Social? Gavin Bell : 8th May 2012
	Moving Beyond Objects Brian Sletten : 3rd May 2012
	Moving Beyond Objects Brian Sletten : 3rd May 2012
	REST & BDD Brian Sletten : 2nd May 2012
	State of the Web Dmitry Buzdin : 1st May 2012
	Simply Business Lukas Oberhuber : 23rd Apr 2012

OTHER JAVASCRIPT & HTML5 EVENTS

	Progressive .NET Tutorials 2012 CONFERENCE (3 DAYS) London, Tuesday, May 29th BOOK NOW!
	The London Python Group FREE EVENT: Python code review London, Wednesday, June 6th
	Dutch Mobile Conference CONFERENCE (3 DAYS) Amsterdam , Thursday, June 7th BOOK NOW!
	London Ruby User Group FREE EVENT: ElasticSearch , Monday, June 11th
	Gavin Bell's Social Applications 2 DAY COURSE. Featuring Gavin Bell London, Thursday, June 14th
	QCon New York 2012 CONFERENCE (3 DAYS) New York, Monday, June 18th BOOK NOW!
	Typesafe's Fast Track to Play 1 DAY COURSE. London, Friday, June 22nd
	Damjan Vujnovic's Advanced JavaScript Workshop 2 DAY COURSE. Featuring Damjan Vujnovic London, Monday, June 25th