Security
Security involves implementing measures and best practices to protect the application and its data from malicious attacks and vulnerabilities.
Security risks may be of different nature: data privacy, identity usurpation, resource abuse, privilege escalation, resource access.
Security applies to PHP itself, and also to the application written with it.
<?php
// classic example of a XSS injection
echo $_GET['a'];
?>
See Also
- PHP Security Best Practices, Vulnerabilities and Attacks
- PHP Security
- Senior PHP Developers Make These Security Mistakes Too — And Nobody Talks About It
- The Quiet Shift Reshaping PHP Security
Related
- Audit Trail
- Attack Surface
- Framework
- Taint Analysis
- Time Of Check To Time Of Use (TOCTOU)
- Data Leak
- Nonce
- OWASP
- Sensitive Parameter
- Code Review
- Distributed Denial Of Service (DDOS)
- Race Condition
- Zero Day Vulnerability
- hash_equals()
- html_entity_decode
- htmlspecialchars
- Insecure Deserialization
- Privacy
- Access Control List (ACL)
- Appeasement Pattern
- Dynamic Loading
- Escape Character
- php://filter
- Poisoned Pipeline Execution (PPE)
- Fuzzing
- Hard Coded
- Hash Comparisons
- OAuth
- Shell Exec
- Capture The Flag (CTF)
- Multi-Factor Authentication (MFA)
- Obfuscation
- Rate Limiting
- CRLF Injection
- escapeshellarg()
- Image Injection
- LDAP Injection
- escapeshellcmd()
- Shell Injection
- Server-Side Request Forgery (SSRF)
- Steganography
- C2 Framework
- Content Security Policy (CSP)
- EXIF (Exchangeable Image File Format)
- file://