PHP Security Programming

1. Safety of Register_globals
2. Don't let unrelated people see the error message
3. Some principles of website security design
4. Availability and Data tracking
5. Filter User Input
6. To escape the output
7. Forms and Data security
8. Attack from the semantics of a URL
9. File Upload Attack defense
10. Defense of cross-site scripting attacks
11. Cross-site request forgery defense of CSRF
12. About form Spoofing submissions
13. HTTP request Spoofing
14. Do not expose database access permissions
15. Prevent SQL injection
16. Cookie exposure causes session to be hijacked
17. Session fixed get legal session
18. The defense of Session hijacking
19. Prevent exposure to source code
20. Pay attention to the backdoor URL
21. Prevent file names from being manipulated
22. The file contains code injection attacks
23. File directory guessing vulnerability
24. Risk of opening remote files
25. Shell command Injection
26. Brute Force attack
27. Password sniffing and replay attacks
28. Remember security practices for sign-in status
29. Source code security for shared hosts
30. Better session data security
31. Session Data Injection
32. Host file Directory browsing
33. Safe Mode for PHP

PHP Security Programming