Main Page

SecurePHP is a wiki about PHP security. To learn more about what a wiki is, please visit Wikipedia. If you'd like to experiment with writing wiki syntax and articles, please use the Sandbox instead of experimenting with existing articles and content.

Topics Covered

If you can't find the topic that interests you here, try the search feature.

Special:Categories

Category:PHP News and Advisories

• HardenedPHP Advisories
• PhpAdvisories
• SecurityFocus Summaries

Category:Application_Development

• Logging
• Passwords
• User Authentication

Category:Injection_Attacks

• Cookie Tampering Attacks
• Cross Site Scripting Attacks
• Email Injection
• False Uploads
• Global Variables
• Input Validation
• LDAP Injection
• Parameter Manipulation Attacks
• Remote File Injection
• SQL Injection
• Using Variables to Access Files
• Using Variables with System Calls
• Variable Injection

Category:Introspection_Vulnerabilities

• HTML Fingerprinting
• Sensitive Files