Great series of security tutorials

Talk about anything in here.
Post Reply
conradk
Posts: 117
Joined: Tue Jul 05, 2011 10:41 pm

Great series of security tutorials

Post by conradk »

Hello :)

I found some good videos about PHP security here:
http://www.youtube.com/watch?v=VUucX6B0 ... ure=relmfu

Obviously, there's also a first part to this tutorial :) I encourage you to watch them if you aren't used to PHP security.

Two more links for the ones that want to get more secured:
http://en.wikipedia.org/wiki/Cross-site_request_forgery
http://en.wikipedia.org/wiki/Session_fixation

Stay safe,
CK

PS: I did not contribute, nor am I affiliated with any of the above mentioned sites. This is not some kind of ad. Just valuable information.
libeco
Posts: 104
Joined: Sat May 07, 2011 9:56 am

Re: Great series of security tutorials

Post by libeco »

derekbanas is one of the YouTube tutorial channels I follow. He has a few nice tutorials, and all 1080p!
twiggy
Posts: 58
Joined: Sat Jun 11, 2011 11:11 pm

Re: Great series of security tutorials

Post by twiggy »

Thanks for this
User avatar
jacek
Site Admin
Posts: 3262
Joined: Thu May 05, 2011 1:45 pm
Location: UK
Contact:

Re: Great series of security tutorials

Post by jacek »

[syntax=php]echo ‘<p><font color=”red” size=”+1″>Please enter your first name!</font></p>’;[/syntax]
Lost interest when I saw that !

Also, there is no need to escape the zip code, as it is forced to only be numbers by the regular expression.

And the other thing is that this code ends up way longer than it needs to be :?

I'm sure it well explained though :)
Image
conradk
Posts: 117
Joined: Tue Jul 05, 2011 10:41 pm

Re: Great series of security tutorials

Post by conradk »

jacek wrote:[syntax=php]echo ‘<p><font color=”red” size=”+1″>Please enter your first name!</font></p>’;[/syntax]
Lost interest when I saw that !

Also, there is no need to escape the zip code, as it is forced to only be numbers by the regular expression.

And the other thing is that this code ends up way longer than it needs to be :?

I'm sure it well explained though :)


Yeah, I noticed he does escape somethings that don't need to be escaped. But I guess that the goal is not to teach guys like you :) But more PHP 'newbies' like myself so as to get us used to using these security methods :P

Another great site, which also explains how to prevent session fixation, cookie theft and stuff like that:
http://www.phpfreaks.com/tutorial/php-security
User avatar
EcazS
Posts: 789
Joined: Fri May 06, 2011 5:29 pm

Re: Great series of security tutorials

Post by EcazS »

I know it's about security but I thought he did a little to much. He had like 50 random number generators on the password o_O
Post Reply