Comments on: Top Ten Security Vulnerabilities in PHP Code ! http://rochakchauhan.com/blog/2008/07/13/top-ten-security-vulnerabilities-in-php-code/ Know your limits, but never stop trying to exceed them. Tue, 09 Mar 2010 01:38:57 +0000 http://wordpress.org/?v=2.9.2 hourly 1 By: Lakshmikanth http://rochakchauhan.com/blog/2008/07/13/top-ten-security-vulnerabilities-in-php-code/comment-page-1/#comment-1234 Lakshmikanth Wed, 29 Jul 2009 10:23:37 +0000 http://rochakchauhan.com/blog/2008/07/13/top-ten-security-vulnerabilities-in-php-code/#comment-1234 pls include the vulnerabilities of remote file inclusion pls include the vulnerabilities of remote file inclusion

]]> By: Joe http://rochakchauhan.com/blog/2008/07/13/top-ten-security-vulnerabilities-in-php-code/comment-page-1/#comment-1188 Joe Wed, 20 May 2009 09:00:53 +0000 http://rochakchauhan.com/blog/2008/07/13/top-ten-security-vulnerabilities-in-php-code/#comment-1188 You can also try using automated blackbox approach using fuzzing to find vulnerabilities in your code. I had very good results with mine PHP applications. 'Securing PHP Web Applications' by Tricia Ballad; William Ballad mentions some good fuzzers. I recommend Powerfuzzer. You can also try using automated blackbox approach using fuzzing to find vulnerabilities in your code. I had very good results with mine PHP applications. ‘Securing PHP Web Applications’ by Tricia Ballad; William Ballad mentions some good fuzzers. I recommend Powerfuzzer.

]]> By: rochakchauhan http://rochakchauhan.com/blog/2008/07/13/top-ten-security-vulnerabilities-in-php-code/comment-page-1/#comment-747 rochakchauhan Wed, 03 Sep 2008 07:24:01 +0000 http://rochakchauhan.com/blog/2008/07/13/top-ten-security-vulnerabilities-in-php-code/#comment-747 Sorry for the confusion, no offense to David Sklar. I have explained him the situation personally. The idea was to share and spread the word. But I guess I owe an apology for NOT including the credits. I have added the credits in the post now. You all are requested to make use of the information and thank David (http://www.sklar.com) Sorry for the confusion, no offense to David Sklar. I have explained him the situation personally. The idea was to share and spread the word. But I guess I owe an apology for NOT including the credits.

I have added the credits in the post now. You all are requested to make use of the information and thank David (http://www.sklar.com)

]]> By: Jeff Carouth http://rochakchauhan.com/blog/2008/07/13/top-ten-security-vulnerabilities-in-php-code/comment-page-1/#comment-746 Jeff Carouth Mon, 01 Sep 2008 16:34:16 +0000 http://rochakchauhan.com/blog/2008/07/13/top-ten-security-vulnerabilities-in-php-code/#comment-746 Seriously, have some integrity and give credit where it is due. While some people may praise you for this, it is despicable practice and reflects poorly on yourself as an individual and your company. Do the right thing. (See post by Chris Shiflett for a link to the original copy by the _real_ author of this post) Seriously, have some integrity and give credit where it is due. While some people may praise you for this, it is despicable practice and reflects poorly on yourself as an individual and your company. Do the right thing.

(See post by Chris Shiflett for a link to the original copy by the _real_ author of this post)

]]> By: Ivan Jovanovic http://rochakchauhan.com/blog/2008/07/13/top-ten-security-vulnerabilities-in-php-code/comment-page-1/#comment-745 Ivan Jovanovic Mon, 01 Sep 2008 15:02:19 +0000 http://rochakchauhan.com/blog/2008/07/13/top-ten-security-vulnerabilities-in-php-code/#comment-745 Stealing just shouldn't be done :) Someone spent lot of time getting to know these things and even was kind to share them with use that know less than him. Plagiarism of this kind is just the worst. Stealing just shouldn’t be done :) Someone spent lot of time getting to know these things and even was kind to share them with use that know less than him. Plagiarism of this kind is just the worst.

]]> By: Joseph Crawford http://rochakchauhan.com/blog/2008/07/13/top-ten-security-vulnerabilities-in-php-code/comment-page-1/#comment-744 Joseph Crawford Mon, 01 Sep 2008 14:53:17 +0000 http://rochakchauhan.com/blog/2008/07/13/top-ten-security-vulnerabilities-in-php-code/#comment-744 Wow why would you steal something like this then not give credit where credit is due. This was a great article David!!! Cannot believe people still plagiarize work like this. Wow why would you steal something like this then not give credit where credit is due. This was a great article David!!! Cannot believe people still plagiarize work like this.

]]> By: Chris Shiflett http://rochakchauhan.com/blog/2008/07/13/top-ten-security-vulnerabilities-in-php-code/comment-page-1/#comment-743 Chris Shiflett Mon, 01 Sep 2008 14:41:05 +0000 http://rochakchauhan.com/blog/2008/07/13/top-ten-security-vulnerabilities-in-php-code/#comment-743 Stealing other people's work without providing attribution is the worst form of plagiarism. http://www.sklar.com/page/article/owasp-top-ten Stealing other people’s work without providing attribution is the worst form of plagiarism.

http://www.sklar.com/page/article/owasp-top-ten

]]> By: frank http://rochakchauhan.com/blog/2008/07/13/top-ten-security-vulnerabilities-in-php-code/comment-page-1/#comment-742 frank Sun, 31 Aug 2008 06:41:45 +0000 http://rochakchauhan.com/blog/2008/07/13/top-ten-security-vulnerabilities-in-php-code/#comment-742 with regards to xss; you might also consider looking into http://htmlpurifier.org/, a great whitelist-filtering component which can be used if you want to allow your users to use some code (html) in what they submit. with regards to xss; you might also consider looking into http://htmlpurifier.org/, a great whitelist-filtering component which can be used if you want to allow your users to use some code (html) in what they submit.

]]> By: Michael Hendrickx http://rochakchauhan.com/blog/2008/07/13/top-ten-security-vulnerabilities-in-php-code/comment-page-1/#comment-736 Michael Hendrickx Fri, 01 Aug 2008 16:48:14 +0000 http://rochakchauhan.com/blog/2008/07/13/top-ten-security-vulnerabilities-in-php-code/#comment-736 Most of these are not application in PHP6 anymore, but still.. nice post! Most of these are not application in PHP6 anymore, but still.. nice post!

]]>