PHP Security

206. Using Grep to Find Security Vulnerabilities in PHP code

Posted on: 2013-05-07

Finding all security vulnerabilities in a piece of code may be hard as it requires in depth analysis of what the code does. However, simple security vulnerabilities follow certain code style patterns that are easier to find with simple search tools.

Read this article to learn how you can find certain types of security vulnerabilities very quickly using the grep program.

 More ...    Post a comment    See comments (0)   Trackbacks (0)

182. Making the Web Faster with HTTP 2 Protocol

Posted on: 2012-05-03

The HTTP protocol version 2.0 is in the process of being defined. There was a call for proposals and several researchers submitted specifications and ideas that can make the Web faster and better in several other aspects.

Read this article to learn about the details of these proposals and what Web developers can expect to prepare to take advantage of the planned improvements of the HTTP 2.0 protocol.

 More ...    Post a comment    See comments (9)   Trackbacks (0)

177. Is PHP Source Quality really Good or is it still Insecure? - Lately in PHP podcast episode 21

Posted on: 2012-03-01

A study from Coverity claims that the source code of Open Source projects such as PHP has a low defect rate.

Meanwhile, a few weeks ago, the security expert Stefan Esser claims that PHP source security bug prevention has a lot to be desired because PHP core developers do not have the habit of using source code auditing tools to prevent security bugs.

The matter of the PHP source code quality and security bug prevention was one of the main topics discussed by Manuel Lemos and Ernani Joppert in episode 21 of the Lately in PHP podcast.

Among other interesting topics, they also discuss the new features of Apache 2.4 and whether it is already possible for PHP sites to take advantage of this new Apache release.

Listen to the podcast now or read the transcript to learn about these and other interesting PHP related topics.

 More ...    Post a comment    See comments (0)   Trackbacks (1)

175. Another Serious Security Bug on PHP 5.3.9

Posted on: 2012-02-03

PHP 5.3.9 release was mostly meant to fix a security bug, but it introduced a new more serious bug. PHP 5.3.10 was just released to fix this issue.

Meanwhile Debian Linux maintainers decided to stop enabling the Suhosin extension by default. This extension is used by several Linux distributions to provide protection against present and future security bugs of PHP.

Read this article to learn more about the just fixed bug what you should do to avoid these security issues. You can also learn more what is the current PHP security status and the importance of the Suhosin extension to prevent PHP security problems.

 More ...    Post a comment    See comments (23)   Trackbacks (0)

171. PHP Vulnerability May Halt Millions of Servers

Posted on: 2012-01-12

A security vulnerability found in PHP and many other programming languages may allow attackers to halt servers with vulnerable PHP installations.

Read this article to learn more about this vulnerability and what you can do to avoid that your servers running PHP may be brought down due to this problem.

 More ...    Post a comment    See comments (14)   Trackbacks (0)

127. Single Sign-On authentication using OpenID and other security measures

Posted on: 2010-08-13

The authentication of the PHPClasses site users will be changed to work in a separate site. It will use the OpenID protocol, so you do not have to create a new account to access other sites.

This article explains better what this means in practice and how it will affect the site users.

Several new measures were implemented to provide better security to protect user accounts and prevent eventual security exploits. Advice is provided to PHP developers in order to apply similar measures to take better care of the security of their sites.

 More ...    Post a comment    See comments (7)   Trackbacks (0)

98. HTML 5 for a better Web

Posted on: 2009-07-06

The HTML 5 will definitely contribute to a better Web. Despite its specification is still being drafted, several browsers like Firefox 3.5, Internet Explorer 8, Safari 4, Chrome 2 and Opera 10 already implement a significant part of the current HTML 5 specification.

This article reviews a bit of the history of how we got to HTML 5 and presents an overview of the enhancements that HTML 5 introduces to provide a better Web.

It also presents a reflection about whether HTML 5 will render useless browser extensions like Flash, Silverlight and Java.

 More ...    Post a comment    See comments (18)   Trackbacks (4)

87. 10 steps to migrate Web site servers with the least of problems

Posted on: 2009-01-30

Sometimes you need to migrate a site between two servers. This article provides advice about which steps a server migration procedure should follow to prevent the problems that may happen.

 More ...    Post a comment    See comments (8)   Trackbacks (2)

67. PHP security exploit with GIF images

Posted on: 2007-06-20

This post talks about a PHP security exploit that can be performed using specially crafted GIF images that embed malicious PHP code. Advice is given on what to do and to not do to avoid the problem.

 More ...    Post a comment    See comments (26)   Trackbacks (13)

65. 8 defensive programming best practices to prevent breaking your sites

Posted on: 2007-04-25

This article describes software development practices that have been used to prevent problems that can break Web sites.

This message also explains recent changes that were made to the site newsletter user options to reduce the site bandwidth usage to keep the hosting costs on budget.

 More ...    Post a comment    See comments (11)   Trackbacks (15)