Introduction to web security
summary
Covers concrete PHP risks and fixes: shows PHP info leakage and advises disable directory listing and use environment variables for passwords instead of config files; recommends .php extension for config, move backups out of web root, and remove exposed salts. Explains MITM and why TLS/SSL is mandatory, details injection types (XSS—claims ~65% of sites vulnerable—SQL injection, code/command/log/excel injection) and prescribes input sanitization (filter_var/filter_input, htmlentities) and prepared statements/structured mode for MySQL, plus patching, log checks, vulnerability scans, and full reinstall as last resort.
AI-written summary · about
chapters (9)
- 0:00Introduction
- 0:22What is security
- 1:05Information leakage
- 2:47Maninthemiddle attack
- 3:19SSL
- 3:58Injection Attacks
- 5:37SQL Truncation
- 7:55What to do
- 8:41How to prevent
related talks
01h 04mWeb Security And You
02h 18mWeb application security (Part 2)
22mWeb development security fundamentals
35mPHP is evil (Defensive programming)
52mPractical Security in Web Applications
01h 01mSecurity: From basic principles to PHP specifics
02h 14mWeb application security (Part 1)
43mPHP Security, Redefined