>Hi every1, i am currently undertaking some research into PHP security and >its flaws / loopholes etc. What i am looking for is information on any >aspects of PHP that can be hacked or cracked and how developers have got >around these problems.
#1. Improper Installation. Solution: Don't do that. #2. Invalid Assumptions. Solution: Don't do that. #1000: Not upgrading for the one (1) security flaw identified in PHP Solution: Upgrade. You may want to start with the Zend sites' Top 21 mistakes of PHP Developers, and also search the Mailing List archives for "Security". There is tons of info, but separating fact from fiction and understanding all the ramifications and finer points will take you quite a lot of research. -- Like Music? http://l-i-e.com/artists.htm -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php