Php & Web Security - PHPXperts 2009

PHP & WEB SECURITY M. Mizanur Rahman C.T.O Informatix Software

WHAT IS SECURITY? ,[object Object],[object Object],[object Object],[object Object]

NECESSITY OF WEB SECURITY ,[object Object],[object Object],[object Object],[object Object],[object Object]

PHP FACTS ,[object Object],[object Object],[object Object],[object Object],[object Object]

COMMON ATTACKS ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

INPUT VALIDATION ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

SQL INJECTION ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

SQL INJECTION - EXAMPLES ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

SQL INJECTION – EXAMPLES CONTINUED ,[object Object],[object Object],[object Object],[object Object],[object Object]

SQL INJECTION – THE CURE ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

SQL INJECTION – THE CURE (CONT.) ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

SQL INJECTION – THE CURE (CONT.) ,[object Object],[object Object],[object Object],[object Object]

PREPARED STATEMENT - EXAMPLE ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

CODE INJECTION ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

CODE INJECTION – PREVENTION ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

XSS – CROSS SITE SCRIPTING ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

XSS – EXAMPLES ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

XSS - PREVENTION ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

CSRF ,[object Object],[object Object],[object Object],[object Object]

EXAMPLE ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

EXAMPLE – (CONTINUED) ,[object Object],[object Object],[object Object],[object Object],[object Object]

PREVENTING CSRF ,[object Object],[object Object],[object Object],[object Object],[object Object]

EXAMPLE ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

NOTE ,[object Object],[object Object],[object Object],[object Object],[object Object]

SESSION SECURITY ,[object Object],[object Object],[object Object],[object Object]

SECURING SESSION ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

NOTES ,[object Object],[object Object],[object Object],[object Object]

THERE ARE MORE!!!! ,[object Object],[object Object],[object Object],[object Object]

RESOURCES ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Php & Web Security - PHPXperts 2009

Empfohlen

Empfohlen

Weitere ähnliche Inhalte

Was ist angesagt?

Was ist angesagt? (19)

Andere mochten auch

Andere mochten auch (20)

Ähnlich wie Php & Web Security - PHPXperts 2009

Ähnlich wie Php & Web Security - PHPXperts 2009 (20)

Php & Web Security - PHPXperts 2009