PHP Security Pt 1

In this PHP Security Tutorial I show you how to secure your database and system from computer hackers. Specifically I cover how to hide your database access files and how to block code injection through the use of regular expressions. The code is here: http://bit.ly/dTHvSb

In the future I'll cover how the following work and how to block them:




* SQL Injection
* Cross Site Scripting (XSS)
* Malicious Code Encoding
* Session Hijacking
* Session Fixation
* Malicious System Calls
* Buffer Overflows

Category:

Howto & Style

Tags:

• PHP Security
• SQL Injection
• Code Injection
• Security
• Database Security
• Regular Expressions

[MIDIS0NG]

Is there any difference between doing like you do:

"require_once("../connect.php"­)" and "include("../connect.php")"

and if so, what is the difference?

[derekbanas]

@MIDIS0NG require_once checks if the file has already been included, and if so, won't include it again

[yesanded]

This is very helpful. Thanks. I'm going to have to go over it a few hundred times as a noob, but I like your pacing. A lot of online tuts are painfully slow and repetitive.

[derekbanas]

@yesanded Thank you. That's why I make all of my videos quick. The slow tutorials always drove me mad as well :)

[ZagreosTheUndead]

@derekbanas Derek at 4:33 you said something was unsafe. What did you mean? I don't recall you saying anything about it in later videos. Were you referring to checking if the form was submitted and doing that way was unsafe? if so what's the safe way?

[derekbanas]

@ZagreosTheUndead Basing a submissions safety off of values in hidden fields isn't safe. I cover how to eliminate the need to do this in later tutorials. I create a unique token key that changes each time a user changes the page.

[ZagreosTheUndead]

@derekbanas I see, I must have over looked it. Thank you.

[therealnod]

This is complete and utter shit

[derekbanas]

@lordzzcabe I point out a bunch of security holes in PHP in this tutorial series. I then show you how to close them

[lordzzcabe]

Did you said this is not safe ? Why is not ?