Website security issues developed by PHP + Mysql?

Websites developed using PHP + Mysql should pay attention to security issues? Hope to see more ~ Thanks to the websites developed with PHP + Mysql, what security issues should we pay attention? Hope to see more ~ Thanks

Reply content:

Websites developed using PHP + Mysql should pay attention to security issues? Hope to see more ~ Thanks

1. Perform Security filtering on user input
2. Disable PHP dangerous functions
3. Disable PHP error prompt
4. Disable super global variables in PHP
5. Pay attention to XSS attacks
6. Avoid SQL Injection
7. Upload Verification
...

The following issues need to be noted:
1. SQL Injection
2. XSS
The preceding two types of attacks are prevented by filtering input variables and escaping output variables. We recommend that you use the whitelist mechanism.
3. File Inclusion
This attack is triggered when dynamic files are included and variables are not filtered. For more information, see the article I wrote.
4. Path Traversal
Improper configuration file settings may cause this vulnerability. For more information, see the article I wrote.
5. File Upload Vulnerability
Allowing users to upload arbitrary files may cause attackers to inject dangerous content or malicious code. For more information, see this article on sebug.

Finally, I suggest you read this article: PHP vulnerability mining ideas + instances.

Pay attention to the Framework bug used