Pro PHP Security: From Application Security Principles to the Implementation of XSS Defenses 2nd Edition

Description

PHP security, just like PHP itself, has advanced. Updated for PHP 5.3,the second edition of this authoritative PHP security book coversfoundational PHP securitytopics like SQL injection, XSS, user authentication, and secure PHP development. Chris Snyder and Tom Myer also dive into recent developments like mobile security, the impact of Javascript, and the advantages of recent PHP hardening efforts. Pro PHP Security, Second Edition will serve as your complete guide for taking defensive and proactive security measures within your PHP applications. Beginners in secure programming will find a lot of material on secure PHP development, the basics of encryption, secure protocols, as well as how to reconcile the demands of server side and web application security.

   What you'll learn
* Secure PHP Development Principles
* PHP Web Application Security
* User and file security
* Mobile Security
* Encryption and Secure Protocols
* Dealing with Javascript Who this book is for

    Pro PHP Security appeals to all intermediate and advanced PHP programmers who need to keep websites safe. It also contains material of interest to all who are concerned with web application security.

    Table of Contents
* Why Is Secure Programming a Concern?
* Validating and Sanitizing User Input
* Preventing SQL Injection
* Preventing Cross-Site Scripting
* Preventing Remote Execution
* Enforcing Security for Temporary Files
* Preventing Session Hijacking
* Securing REST Services
* Using CAPTCHAs
* User Authentication, Authorization, and Logging
* Preventing Data Loss
* Safe Execution of System and Remote Procedure Calls
* Securing Unix
* Securing Your Database
* Using Encryption
* Securing Network Connections: SSL and SSH
* Final Recommendations

CONTENTS:

1. Why Is Secure Programming a Concern?

   2. Validating and Sanitizing User Input

   3. Preventing SQL Injection

   4. Preventing Cross-Site Scripting

   5. Preventing Remote Execution

   6. Enforcing Security for Temporary Files

   7. Preventing Session Hijacking

   8. Securing REST Services

   9. Using CAPTCHAs

  10. User Authentication, Authorization, and Logging

  11. Preventing Data Loss

  12. Safe Execution of System and Remote Procedure Calls

  13. Securing Unix

  14. Securing Your Database

  15. Using Encryption

  16. Securing Network Connections: SSL and SSH

  17. Final Recommendations