|
Posted by Chung Leong on 09/26/08 11:29
Philip Ronan wrote:
>
> A good place to start is <http://www.hudzilla.org/phpbook/read.php/17_0_0>,
> which seems to cover most of the security issues in PHP.
That's not a terribly good resource in my opinion. Everyone who calls
hiding the presence of PHP a form of security measure should look up
"security by obscurity" at Wikipedia. The section on register_globals
misses the bigger issue as well. The fundamental problem is the
reliance on global variables--a poor programming practice in general.
Navigation:
[Reply to this message]
|