RE: [PHP-DB] PHP Security Basics - web seminar

2007-06-14 Thread Lasitha Alawatta
Hi All, If you would like to download the presentation you can find it here: http://www.zend.com/webinar Reg., Lasitha -Original Message- From: Chris [mailto:[EMAIL PROTECTED] Sent: Wednesday, May 30, 2007 11:14 AM To: Lasitha Alawatta Cc: php-db@lists.php.net Subject: Re: [PHP-DB

[PHP-DB] PHP Security Basics - web seminar

2007-05-30 Thread Lasitha Alawatta
Hi All, PHP Security Basics - Must-Knows for Everyone Presenter: John Coggeshall, Zend Solutions Consultant Target audience: Anyone who believes Security is important in Web Application development and deployment Duration: 45 minutes, including QA Security is not just important when

Re: [PHP-DB] PHP Security Basics - web seminar

2007-05-30 Thread Chris
Lasitha Alawatta wrote: Hi All, “PHP Security Basics - Must-Knows for Everyone” Presenter: John Coggeshall, Zend Solutions Consultant Target audience: Anyone who believes Security is important in Web Application development and deployment Duration: 45 minutes, including QA

[PHP-DB] php-security

2002-07-11 Thread Gabor Niederlaender
Hi all! One can see in every php manual and install hint, that you have to consider security issues if you install php as a CGI, but I cannot really imagine what this means. What security issues? Can someone tell me an example, what can happen? Best regards, Gabor -- PHP Database Mailing

[PHP-DB] PHP Security and Code Design

2002-07-10 Thread Hutchins, Richard
OK, so I was really bored today and started reading through some PHP security stuff starting with the php.ini-recommended and found the register globals off stuff. So you don't have to find it yourself, here's a direct lift from the file: ; This is the recommended, PHP 4-style version of the

Re: [PHP-DB] PHP Security and Code Design

2002-07-10 Thread Adam Alkins
I understand that this applies to data put into a form to be submitted to a database (or another page, I guess), but does it also apply to variable/value pairs passed along the URL from a hyperlink (a href=foo/bar.php?thisVar=thisValClick here./a)? I couldn't quite get it from the

RE: [PHP-DB] PHP Security and Code Design

2002-07-10 Thread Hutchins, Richard
Thanks, Adam. All clear now. Rich -Original Message- From: Adam Alkins [mailto:[EMAIL PROTECTED]] Sent: Wednesday, July 10, 2002 4:28 PM To: [EMAIL PROTECTED] Subject: Re: [PHP-DB] PHP Security and Code Design I understand that this applies to data put into a form to be submitted

RE: [PHP-DB] PHP security

2001-02-21 Thread s.budd
moreover , even if they cant see the text of the page, Your password is going over the internet in plain text. -Original Message- From: Don [mailto:[EMAIL PROTECTED]] Sent: Tuesday, February 20, 2001 7:24 PM To: php-db list Subject: [PHP-DB] PHP security I am writing aome PHP

RE: [PHP-DB] PHP security

2001-02-21 Thread s.budd
But if the database is on another machine then the password is sent as plain text over the internet, no? -Original Message- From: Ben Cairns [mailto:[EMAIL PROTECTED]] Sent: Wednesday, February 21, 2001 10:06 AM To: [EMAIL PROTECTED] Subject: RE: [PHP-DB] PHP security Anything

RE: [PHP-DB] PHP security

2001-02-21 Thread php3
Addressed to: "s.budd" [EMAIL PROTECTED] [EMAIL PROTECTED] ** Reply to note from "s.budd" [EMAIL PROTECTED] Wed, 21 Feb 2001 10:03:33 - But if the database is on another machine then the password is sent as plain text over the internet, no? No. MySQL encrypts the password

RE: [PHP-DB] PHP security

2001-02-20 Thread Ben - FCP
February 2001 19:51 To: Don; php-db list Subject: Re: [PHP-DB] PHP security As far as I know, you can not download PHP programs without access to download them. Meaning you need an account on the webserver, so they would need your account user and pass before they could steal your mysql user and pass. I

Re: [PHP-DB] PHP security

2001-02-20 Thread Ron Brogden
At 01:50 PM 2/20/2001 -0600, you wrote: As far as I know, you can not download PHP programs without access to download them. Meaning you need an account on the webserver, so they would need your account user and pass before they could steal your mysql user and pass. The main issue is that