PHP Security-simple is beautiful

Simple means that the beauty is complicated and leads to errors, which can lead to security vulnerabilities. This simple fact shows why simplicity is important to a secure application. No need to repeat...

Simple is beautiful

Complicated breeding errors can lead to security vulnerabilities. This simple fact shows why simplicity is important to a secure application. No complexity is as bad as no risk.

For example, the following code is taken from a recent security vulnerability announcement:

CODE:

This process obfuscated the fact that $ search variables are contaminated *, especially for inexperienced developers. The preceding statement is equivalent to the following program:

CODE:

The above two processes are identical. Pay attention to the following statement of explain:

$ Search = $ _ GET ['search'];

This statement ensures that the status of the $ search variable remains unchanged without affecting the process. It also shows whether the variable is contaminated.

* Description: contaminated variable. during program execution, the value of this variable is not directly specified by the value assignment statement, but from other sources, such as console input and database.

The above is PHP Security-simple is beautiful content. For more information, see PHP Chinese network (www.php1.cn )!