Archive
PHP Application Security Checklist
Similarly to the OWASP Cheat Sheet on PHP security, there is another great checklist to be shared – PHP Application Security Checklist.
Structured in a way for you to be able to revise all aspects of an existing PHP application. Print a couple of times and perform a security audit of your website until full completion of the list.
General topics covered:
- Basic
- Input
- File Uploads
- Database
- Serving Files
- Authentication
- Sessions
- 3rd Party
- Misc
- Shared Hosting
OWASP on PHP: Security Cheat Sheet
If you are into security and eager to learn more, the OWASP project is the right place for you.
With a large variety of tutorials, tools, videos and articles, the PHP Securty Cheat Sheet is a must covering pretty much everything that has to be covered on PHP, database layer and network server side. Get acquainted with escaping, database queries and code injections, session and global variables management, filters and regular expressions. Research the available security modules for PHP, hashing functions, ID storage and cryptography specifics.
Web Security Blog 