PHP MySQL Security Best Practices For Your Website and Server

[Royalllllll]

most hackers is from rusia..and i really feel big respect if ppl who see holes in any website,he is helping admin with this,not using in bad way..

[mitnick911]

php-security-guide.pdf page is dead...

[Foaman]

Yeah.  d-bags suck.

[v8soup]

I so enjoy your videos. They're freaking hilarious! It makes programming fun! I laughed so hard during this one. Good job. programming and entertainment at the same time. Love your stuff!

[fleetstdemon1]

You make out in this video that your just trying to be helpful and direct people to some security information resources, when it is blatantly obvious that you are just sore at this guy for hacking your site and telling everybody how "weak" the site is/was.

Now, making a video to tell people about an experience you had and how you felt about it is fine, but don't try to disguise it as a help video.

You sound like a kid who's daddy pulled down his pants and spanked him in front of his friends.

[Frie666]

чето пиздит пиздит и нниачем, америкосы ебанутые, больше времени пиздят чем что то показывают

[fedeetz]

You sound butthurt man, no offense.

Instead of looking at scriptboys and self-proclaimed "hackers" as douche bags, you should look at them as annoying reminders of the security holes in your site. Is not their fault to be assholes and try to hack your page, is your fault to make shitty vulerable code and let them succeed

[GamingJediPwns]

@fedeetz So when you catch a nasty virus that wipes out all the files on your computer its not the virus writers fault for being a retard and spending his/her obvious skills making destructive software when they could have been making games or something.

[abakusdeb]

Have set up your php on my newsletter index page and not sure how to insert the filter coding into your index code. I have looked at the information, but am afraid by changing the inputed code that I will lose what I have in there - Scared!! Can you advise me what to do??

[Remi1115]

Hello.

Can you maybe show us how you made a system that records when people try to hack your site?

(Or if you think that it's not a good idea to show that on YouTube I understand).

Remi1115

[SRecordsdottk]

thanks

[micahblu]

Very Funny! Love the douche bag reference for the hackers! Great stuff!

[BFBC2TipsNTricks]

Just finished your awesome playlist, thanks mate, your so good, and actually explain your tutorials and methods unlike the others who just say heres the whole source file, there you go, upload it and thats it, your amazing mate, cheers

[shakaama]

so a "friend" told me he could hack my site in 2 seconds. I don't get it. My site is an info site for legal information. Other than erase what's there, what could he possibly do to my site?

And yes i thought it was a very douche bag thing to even say. I mean, why even say something like that. That's like say, "oh hey i can screw your sister." I mean come on.

[Zackary210]

Ya those people are douche bags.

[djshaanky]

Well said bro!

[snrchat]

new intro dont work on 360p for moi

[TheNerdyFreak]

Like the new intro ;) Much better than the old 1!

[skierplaterandy]

dynamic ip adresses :)

[ra2yuri4]

@skierplaterandy that doesn't work anymore. At least, not on the world wide web today. There are many ways around it.

Its called, dynamic-IP range.

Your ISP provides you a range of IP's, starting with xxx.yyy.zzz.(last 3 here). The most common way to ban a dynamic IP and making sure the same user with dynamic doesn't unplug his modem for a new one, you can block ip's by range.

[skierplaterandy]

@ra2yuri4 yes, then the site developer shoots himself in the foot as he bans an entire ISP from viewing his website :)

there is another way though, a lot of ISPs give a user a specific id that sticks with them for the life of their use, I'm not exactly sure how it works, but it is transferred to the server, and its unique to you always.

[ra2yuri4]

@skierplaterandy there are billions of isp's and IP addresses in the world. Maybe 3 or 4 people may be restricted, but that is such a small number, and the chances of anyone in that range viewing your website is extremely low.

Also, with IPv6 on its way, this will all be a thing of the past~

and what you're describing, is static-IP.

[skierplaterandy]

@ra2yuri4 no, I'm not talking about static IPs. I'm talking about "machine names."

it was referred in GRC's "Sheilds Up" tester, I'm just not entirely sure if you could use it as a way to block certain computers.

The website also refers to is as a "reverse DNS."

And think, what if a website blocked all users of Shaw Cable. A lot of traffic in north America goes through their service even if they aren't using that ISP, and thousands do use it.

[ra2yuri4]

@skierplaterandy

I actually did here about that. I do think there is something already done about it though. I heard it was "IP reset" or something of the kind. I'm not familiar with how it works.

I also don't use ShawCable. And that sounds impossible, unless the company only had 999 IP's to share. From what I know, most ISP's have a range from 15,700,000-60,000,000 different IP's around the world, and can only share a certain amount in depending on where you live.

[skierplaterandy]

@ra2yuri4 ah, good point.

I don't use Shaw either, but its a really popular isp in the states i think.

if you blocked out 1000 potential customers from your site every time you had someone try and hack it, your placing your site in a hard spot. A more popular site would probably have a lot of attempts to hack it. Idk, my site isn't popular enough for me to get actual figures.

[Waranle]

This is what i needed, Thank you Adam

[MyLego2000]

Like the new intro

[MrShawnlloyd]

Great links Adam. Hackers just plain suck, they have nothing of value so they decide to try to make great things suck as bad as they do

[littlestar1562]

@MrShawnlloyd you mean crackers....shhh

[webmastertool]

Nice intro.

[Arriolason]

This is kick-ass at its best! You go Adam.

[Kuguar100]

Awesome intro!

[shanetalbert]

2:59 talking about jasonmaster? lol..and sweet intro, thanks for the tipt!

[basixnick]

love the intro!!!

[Djghost1123]

i like this into much better, increase the fps though

[joosle]

New intro is AWESOME!

[VideosThatHelp]

Love The New Intro :) i <3 Adam LOl