Securing PHP Apps (eBook)

Ben Edmunds (Autor)

eBook Download: PDF

2016 | 1st ed.
XIV, 52 Seiten
Apress (Verlag)
978-1-4842-2120-4 (ISBN)

Infos

Secure your PHP-based web applications with this compact handbook. You'll get clear, practical and actionable details on how to secure various parts of your PHP web application. You'll also find scenarios to handle and improve existing legacy issues.

Is your PHP app truly secure? Let's make sure you get home on time and sleep well at night. Learn the security basics that a senior developer usually acquires over years of experience, all condensed down into one quick and easy handbook. Do you ever wonder how vulnerable you are to being hacked? Do you feel confident about storing your users' sensitive information? Imagine feeling confident in the integrity of your software when you store your users' sensitive data. No more fighting fires with lost data, no more late nights, your application is secure.

Well, this short book will answer your questions and give you confidence in being able to secure your and other PHP web apps.

What You'll Learn
Never trust your users - escape all input

HTTPS/SSL/BCA/JWH/SHA and other random letters: some of them actually matter

How to handle password encryption and storage for everyone

What are authentication, access control, and safe file handing and how to implement them

What are safe defaults, cross site scripting and other popular hacks 

Who This Book Is For

This book is for experienced PHP coders, programmers, developers.

Ben Edmunds leads development teams to create cutting-edge web and mobile applications. He is an active leader, developer, and speaker in various development communities, especially the CodeIgniter and Laravel PHP framework communities. He has been developing software professionally for over 10 years and in that time has worked on everything from robotics to government projects.  Lastly, he's a PHP Town Hall podcast co-host. 

---

Secure your PHP-based web applications with this compact handbook. You'll get clear, practical and actionable details on how to secure various parts of your PHP web application. You'll also find scenarios to handle and improve existing legacy issues.Is your PHP app truly secure? Let's make sure you get home on time and sleep well at night. Learn the security basics that a senior developer usually acquires over years of experience, all condensed down into one quick and easy handbook. Do you ever wonder how vulnerable you are to being hacked? Do you feel confident about storing your users' sensitive information? Imagine feeling confident in the integrity of your software when you store your users' sensitive data. No more fighting fires with lost data, no more late nights, your application is secure.Well, this short book will answer your questions and give you confidence in being able to secure your and other PHP web apps.What You'll LearnNever trust your users - escape all inputHTTPS/SSL/BCA/JWH/SHA and other random letters: some of them actually matterHow to handle password encryption and storage for everyoneWhat are authentication, access control, and safe file handing and how to implement themWhat are safe defaults, cross site scripting and other popular hacks Who This Book Is ForExperienced PHP coders, programmers, developers.

Inhalt

ConstructorFormatErrataSample CodeAbout the AuthorChapter 1 - Never Trust Your Users. Sanitize ALL Input!SQL InjectionMass AssignmentTypecastingSanitizing OutputChapter Two - HTTPS/SSL/BCA/JWH/SHA and Other Random Letters; Some of Them Actually Matter.What is HTTPSLimitationsWhen to use HTTPSImplementing HTTPSPathsChapter 3 - Password Encryption and Storage for EveryoneThe Small PrintWhat is a Hash?Popular AttacksA Pinch of SaltHashing AlgorithmsStorageValidationPutting It All TogetherBrute Force ProtectionUpgrading Legacy SystemsResourcesChapter 4 - Authentication, Access Control, and Safe File HandingAuthenticationAccess ControlValidating RedirectsNever Trust Yourself - Use Safe DefaultsNever Trust Dynamic Typing. It’s Not Your Friend.Cross Site ScriptingAttack Entry PointsCross Site Request ForgeryMultiple Form SubmitsRace ConditionsOutdated Libraries / External ProgramsDestructorAbout the AuthorSecurity Audit / Consulting

Produkt-Details

• Erscheint lt. Verlag: 26.7.2016
• Zusatzinfo: XIV, 52 p. 2 illus. in color.
• Verlagsort: Berkeley
• Sprache: englisch
• Themenwelt: Informatik ► Netzwerke ► Sicherheit / Firewall
• Themenwelt: Mathematik / Informatik ► Informatik ► Programmiersprachen / -werkzeuge
• Themenwelt: Mathematik / Informatik ► Informatik ► Web / Internet
• Schlagworte: Apps • PHP • Scripting • secure • security • Web
• ISBN-10: 1-4842-2120-6 / 1484221206
• ISBN-13: 978-1-4842-2120-4 / 9781484221204