Posted by rjames.clarke on 11/03/05 15:42

I am developing an online application and the last thing I need to get
a handle on is security.
This app is very heavy with forms. Business critical data will be
entered via forms and inserted in to a database (mysql).

I've google "php security" and from what I've read, I should:

1) Filter all form data by stripping all non-alpha/numeric characters
out,

2) Have the database on a different server,

3) Use "POST" not "GET",

4) Turn global variables off.

5) Use sessions for logins

Should this do it? Or do I need more precautions?
Even with all this can I still get hacked?

Thanks

bob

• Next in forum: Re: Newsletter Secure Subscribe/Unsubscribe
• Prev in forum: Re: mysql_real_escape_string() vs addslashes()
• Thread view: PHP Security

[Reply to this message]