Skills Matter : Yahoo! Developer Network:PHP Security

HOME

SCALA & F#

JAVA

.NET

WEB

GROOVY & GRAILS

ANDROID & IOS

NOSQL

ARCHITECTURE

AGILE & SCRUM

AGILE DEVELOPER

Yahoo! Developer Network:PHP Security

PHP Security
In this Yahoo Developer Night Jose gives a talk on PHP Security, demonstrating the most common security issues, how to exploit them and how to protect an application against them. This is a great talk for anyone who writes web applications in PHP. The basic premise is that you automatically distrust any input that comes from the user.

Jose goes through all of the main hacking techniques used to break into PHP web applications and how dangerous it can be if your website contains any of the commonly exploited issues. The techniques illustrated are:

XSS (Cross Site Scripting) – Inserting content into a page

SQL Injection – Executing SQL statements on the server

File Uploads – Allowing the user to upload a file and how this can be exploited.

General configuration issues

Jose also illustrates how quickly a website can be broken if it’s not secure in relation to any of these techniques. The talk is very informative and useful to anyone involved in PHP applications. It definitely makes you think twice when dealing with user input.

ABOUT JOSE PALAZON

Jose Palazon (palako) is responsible for Mobile security worldwide at Yahoo!. He is 8+ years experienced in security advisory and...
More about Jose Palazon

ABOUT THE YAHOO! DEVELOPER NETWORK

The Yahoo! Developer Network offers Web Services and APIs that make it easy for developers to build applications and mashups. Yahoo! APIs let developers tap into Yahoo!'s world-class data and infrastructure to help power their businesses and integrate data sources in new ways, making the web a more useful and interesting place for everyone.
More about the Yahoo! Developer Network

PODCAST PHP SECURITY

SPONSORS

JAVASCRIPT & HTML5 COURSES

	BRIAN SLETTEN'S SEMANTIC WEB BOOTCAMP
	CHRISTOPHE HERREMAN'S SPRING ACTIONSCRIPT COURSE
	DAMJAN VUJNOVIC'S ADVANCED JAVASCRIPT WORKSHOP
	DAVID A. BLACK'S RUBY BOOTCAMP
	DAVID POLLAK'S LIFT BASICS
	DMITRY BUZDIN'S ADVANCED GOOGLE WEB TOOLKIT
	DYLAN SCHIEMANN'S DOJO APP DEVELOPMENT WORKSHOP
	DYLAN SCHIEMANN'S RICHER WEB EXPERIENCES WITH DOJO
	MARK BIRBECK'S RDFA THEORY AND PRACTICE
	MATTHEW BAXTER-REYNOLDS' PHONEGAP COURSE
	PETER LUBBERS' HTML5 FAST TRACK COURSE
	PETER LUBBERS' HTML5 PERFORMANCE & WEBSOCKETS
	PETER LUBBERS' HTML5 “FAST TRACK”
	RUSSEL WINDER'S PYTHON WORKSHOP
	TYPESAFE'S FAST TRACK TO PLAY

JAVASCRIPT & HTML5 PODCASTS

	High Performance Python Russel Winder : 31st Jan 2012
	What's happening in Wordpress Chris Adams : 19th Jan 2012
	Wordpress Responsive Design Mark Mitchell : 19th Jan 2012
	Scaling WordPress Peter Westwood : 19th Jan 2012
	HTML5 & Android Webview Dave Springgay : 19th Jan 2012
	Titatnium & PhoneGap... Jonathan Anthony : 19th Jan 2012
	Trends & Patterns Andy Richardson : 10th Jan 2012
	I18n Chris McGrath : 9th Jan 2012
	Judge Joe Corcoran : 9th Jan 2012
	BrowserID Christian Heilmann : 13th Dec 2011
	Usable APIs : 12th Dec 2011
	HATEOS : 12th Dec 2011
	Heroku platform Chris O Davies : 5th Dec 2011
	Deploying Java Apps to Heroku Nicola Tassini : 5th Dec 2011
	The Why, What and How of Heroku John Beynon : 5th Dec 2011

OTHER JAVASCRIPT & HTML5 EVENTS

	Official RNIB Accessibility Hackathon CONFERENCE (2 DAYS) London, Saturday, February 11th BOOK NOW!
	Russel Winder's Python Workshop 4 DAY COURSE. Featuring Russel Winder London, Monday, February 13th
	Coding Kata FREE EVENT: In The Brain of Damjan Vujnovic London, Wednesday, February 15th
	London Ruby User Group FREE EVENT: LRUG lightning London, Tuesday, February 21st
	QCon London 2012 CONFERENCE (3 DAYS) London, Wednesday, March 7th BOOK NOW!
	Elevate Events FREE EVENT: elevate-launch-event London, Wednesday, March 7th
	London Ajax User Group FREE EVENT: Dart London, Tuesday, March 13th
	Peter Lubbers' HTML5 Fast Track Course 2 DAY COURSE. Featuring Peter Lubbers New York, Wednesday, March 14th