PHP: Creating Secure Websites

PHP: Creating Secure Websites

English | MP4 | AVC 1280×720 | AAC 48KHz 2ch | 1h 22m | 192 MB

Hackers target PHP web applications more often than other sites because most PHP code is written by developers with little security experience. Protecting web applications from these attacks has become an essential skill for all PHP developers. PHP: Creating Secure Websites shows you how to meet the most important security challenges when developing websites with PHP. Instructor Kevin Skoglund covers the techniques and PHP code needed to develop sites that are more secure, and to avoid common mistakes. Learn how to configure PHP properly and filter input and escape output. Then check out step-by-step defenses against the most common forms of attack, including cross-site scripting and SQL injection.

Topics include:

Cross-site scripting (XSS)
Cross-site request forgery (CSRF)
SQL injection
Session hijacking and fixation

Table of Contents

1 The need for security with PHP
2 Validating input
3 Sanitizing data
4 Keeping code private
5 Smart logging
6 Cookie configuration
7 Cross-site scripting (XSS)
8 Cross-site request forgery (CSRF)
9 SQL injection
10 Session hijacking and fixation
11 Remote system execution
12 What is security-
13 PHP code injection
14 Next steps
15 Security and PHP
16 General security principles
17 Keeping versions up to date
18 phpinfo and phpMyAdmin
19 Configure error reporting and logging
20 Other configuration options
21 PHP on a shared host

Homepage