2015
PHP: Supported Versions
by dzc & 1 other
Each release branch of PHP is fully supported for two years from its initial stable release. During this period, bugs and security issues that have been reported are fixed and are released in regular point releases.
After this two year period of active support, each branch is then supported for an additional year for critical security issues only.
2013
emposha/PHP-Shell-Detector · GitHub
by srcmax
Web Shell Detector – is a php script that helps you find and identify php/cgi(perl)/asp/aspx shells. Web Shell Detector has a “web shells” signature database that helps to identify “web shell” up to 99%
2010
2009
2008
Sécuriser une application Web développée en PHP - Tutoriel/Pratique sur Journal du Net Développeurs
by eaque & 2 others
Protéger un développement PHP contre les attaques passe notamment par l'application de certaines règles de configuration. La mise en œuvre d'une stratégie de programmation défensive est un plus.
Nexen.net : portail PHP et MySQL - XSS, un nouvel art
by damdec
Gareth Heyes détaille son cheminement pour construire une attaque XSS qui passe les défenses de PHP-IDS. PHP-IDS est une bibliothèque de détection, qui surveille les entrées à l'aide de regex et d'une centrifugeuse : cet élément abscons compare des valeurs valides et des valeurs dangereuses avec l'entrée courante pour évaluer la dangerosité d'une valeur qui passerait les regex initiales.
inspekt - Google Code
by loopinglechat & 3 others (via)
Inspekt acts as a sort of 'firewall' API between user input and the rest of the application. It takes PHP superglobal arrays, encapsulates their data in an "cage" object, and destroys the original superglobal. Data can then be retrieved from the input data object using a variety of accessor methods that apply filtering, or the data can be checked against validation methods. Raw data can only be accessed via a 'getRaw()' method, forcing the developer to show clear intent.
2007
Introduction To PHP Security Vulnerabilities
by chantal & 2 others
PHP Coding Practices - Become an expert PHP Programmer
Record as I Am - Avoiding frustration with PHP Sessions
by dzc & 1 other (via)
4 tips to help you avoid wasting your time and securing
2006
