Reconsidering PHP variables

(Page 1 of 7 )

Php helps you to quickly build big applications and many times, its easy to neglect the security matter. Its easy to believe that security breaches could not happen to your software. But what if it does happen? For this reason, security in your applications should be kept in consideration from the beginning.

I have read in the past many scary things about PHP variables. Words like: be aware, take care or look again are still in my mind. And slowly, I have realized that it would be prudent to follow some steps when using PHP variables. I have tested many secure implementations and found no performance decrease when being processed by the PHP engine. 

Here is a short list of things you can do to better protect the security of your applications:

1. Check the number of POST, GET and COOKIE variables handled by your applications.
2. Check if the variable content is of appropriate type. 
3. Using REQUEST METHOD and REFERRER.
4. Check the variable content length.
5. Check a 'secret key' inside one variable.

Next: Counting your cookies? >>
 

More PHP Articles
More By Iulian Turnea

Comments On: Reconsidering PHP variables

· A poor article that promotes invalid HTML and uses a ludicrous substr() method to...    · After reviewing the content of the article, we made some changes and corrections to...    · Isn't stuff like HTTP_GET_VARS very old?    · Its old, but it works. I think the article is pretty good, since it shows some...    · If you use is_numeric() in place of is_integer(), then you can enclose the value of...    · When you are using values in an HTML form, you should always quote the attribute...    · I may be mistaken (not!) but in page 5 it reads:header(" You can send up to 3000...    · $limit=count($_GET);echo $list;should be:echo $limit;There is no PHP...    · oh how friendly...I am logged in, but am named 'Anonymous...    · Terrible article.    · First, you may be logged in, but you need to create a blog account in order to not...    · I want a a complete and comprehensive guide on hardening your scripts to be...    · I'm going to have to side with Rich. When judging an article, you should consider...    · Excellent choice of books!    · always thought devshed has some kind of a guywho at least screens the articles...    ·    >>> Post your comment now!