PHP Security-in-depth defense

The principle of deep defense is the principle of security professionals. it illustrates the value of redundant security measures, which has been proved by history. Deep...

In-depth defense

The principle of deep defense is the principle of security professionals. it illustrates the value of redundant security measures, which has been proved by history.

The principle of deep defense can be extended to other fields, not just programming fields. Skydiving players who have used backup umbrellas can prove how valuable redundant security measures are, even though they never want their umbrellas to expire. A redundant security measure can play a major role in the potential failure of the primary security measure.

Back in the programming field, adhering to the principle of deep defense requires that you always have a backup solution. If one security measure fails, another one must provide some protection. For example, it is a good habit to re-authenticate users before they perform important operations, even though there are no known defects in your user authentication logic. If an unauthenticated user pretends to be another user in some way, prompting the user to enter the password may avoid unauthenticated (unauthenticated) users to perform some key operations.

Although in-depth prevention is a reasonable principle, excessive security measures can only increase costs and reduce value.

The above is the content of PHP Security-in-depth prevention. For more information, see PHP Chinese network (www.php1.cn )!