Php My Sql Security 2007

PHP and MySQL Web App Security Laura Thomson (laura@omniti.com)

Why is web application security important?

Overview ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Rationale ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Who am I, and why should you listen to me? ,[object Object],[object Object],[object Object],[object Object],[object Object]

Basic principles ,[object Object],[object Object],[object Object],[object Object]

Secure your configuration ,[object Object],[object Object],[object Object],[object Object],[object Object]

Accounts and Privileges ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Using encryption ,[object Object],[object Object],[object Object]

External Data ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Attacks ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

SQL Injection ,[object Object],[object Object],[object Object],[object Object]

Example ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Preventing SQL injection ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Prepared statements mysqli ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Prepared statements PDO ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

XSS ,[object Object],[object Object],[object Object]

Example – part 1 ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Example – part 2 ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

So what? ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

How do I prevent this? ,[object Object],[object Object],[object Object],[object Object]

Session fixation ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Session hijacking ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

CSRF ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Code injection ,[object Object],[object Object],[object Object],[object Object],[object Object]

Example: Theme Selector ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Prevention ,[object Object],[object Object],[object Object]

Big picture prevention ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Resources ,[object Object],[object Object],[object Object],[object Object],[object Object]

Final words ,[object Object],[object Object],[object Object],[object Object],[object Object]

Php My Sql Security 2007

Empfohlen

Empfohlen

Weitere ähnliche Inhalte

Was ist angesagt?

Was ist angesagt? (18)

Andere mochten auch

Andere mochten auch (8)

Ähnlich wie Php My Sql Security 2007

Ähnlich wie Php My Sql Security 2007 (20)

Mehr von Aung Khant

Mehr von Aung Khant (20)

Kürzlich hochgeladen

Kürzlich hochgeladen (20)

Php My Sql Security 2007