Securing PHP Apps

1. Front Matter

   Pages i-xiv

   PDF

2. Never Trust Your Users. Sanitize ALL Input!

   • Ben Edmunds

   Pages 1-8

3. HTTPS/SSL/BCA/JWH/SHA and Other Random Letters; Some of Them Actually Matter

   • Ben Edmunds

   Pages 9-16

4. Password Encryption and Storage for Everyone

   • Ben Edmunds

   Pages 17-31

5. Authentication, Access Control, and Safe File Handling

   • Ben Edmunds

   Pages 33-40

6. Safe Defaults, Cross-Site Scripting, and Other Popular Hacks

   • Ben Edmunds

   Pages 41-47

7. Back Matter

   Pages 49-52

   PDF

Secure your PHP-based web applications with this compact handbook. You'll get clear, practical and actionable details on how to secure various parts of your PHP web application. You'll also find scenarios to handle and improve existing legacy issues.

Is your PHP app truly secure? Let's make sure you get home on time and sleep well at night. Learn the security basics that a senior developer usually acquires over years of experience, all condensed down into one quick and easy handbook. Do you ever wonder how vulnerable you are to being hacked? Do you feel confident about storing your users' sensitive information? Imagine feeling confident in the integrity of your software when you store your users' sensitive data. No more fighting fires with lost data, no more late nights, your application is secure.

Well, this short book will answer your questions and give you confidence in being able to secure your and other PHP web apps.

What You'll Learn

• Never trust your users - escape all input
• HTTPS/SSL/BCA/JWH/SHA and other random letters: some of them actually matter
• How to handle password encryption and storage for everyone
• What are authentication, access control, and safe file handing and how to implement them
• What are safe defaults, cross site scripting and other popular hacks 

Who This Book Is For



Experienced PHP coders, programmers, developers.

• php
• security
• scripting
• web
• apps
• secure

• Brooklyn, USA

  Ben Edmunds

Ben Edmunds leads development teams to create cutting-edge web and mobile applications. He is an active leader, developer, and speaker in various development communities, especially the CodeIgniter and Laravel PHP framework communities. He has been developing software professionally for over 10 years and in that time has worked on everything from robotics to government projects.  Lastly, he's a PHP Town Hall podcast co-host. 

Policies and ethics