January 2012 – Mohamed Sharaf محمد شرف

php security – XSS XSS SQL Injection Spoofed Form Input CSRF File Upload Including Files eval() Register Globals Magic Quotes

Introduction Different Types of Attack XSS SQL Injection Spoofed Form Input CSRF File Uploads Including Files eval() Register Globals Magic Quotes Error Reporting PHP 5 Plain Text Passwords Taking it further: Salting Conclusion Enjoy this guide/find it useful? Please consider donating! Introduction Since PHP is a very high-level scripting language, some of the potential security… Continue reading php security – XSS XSS SQL Injection Spoofed Form Input CSRF File Upload Including Files eval() Register Globals Magic Quotes

SSL in Zend Framework

I had to implement SSL on login, cart and checkout pages. if you want to have SSL enabled for the login page of your application: First, enter the following code in your ssl.ini file. We will parse it later through the Bootstrap.php file. [php] ssl.modules.default.require_ssl = true //-> entire module requires SSL ssl.modules.default.Index.require_ssl = true… Continue reading SSL in Zend Framework