1.SQL injection
PDO
Mysqli
2.Xss Attacks
Pass html output through htmlentities or htmlspecialchars
-
Index
Turn off indexes in .htaccess
-
Error reporting
Turn off error reporting when website is live
5 .Clickjacking
X-frame Header options
Ongezeeni maexperts
1 Like
Hash your passwords. Keep config files where there’s no chance of nefarious access. Is using a framework instead of hand coding a security measure?
1 Like
Depends on the framework. Laravel is the best in terms of security.
1 Like
naona unapenda php sana, pale telekram tuko na php group rink nakutafutia
[QUOTE="Pos€i.Don, post: 647302, member: 1.SQL injection
PDO
Mysqli
2.Xss Attacks
Pass html output through htmlentities or htmlspecialchars
-
Index
Turn off indexes in .htaccess
-
Error reporting
Turn off error reporting when website is live
5 .Clickjacking
X-frame Header options
Ongezeeni maexperts[/QUOTE]
With the CMS craze (I prefer hard-coding scripts), make sure your config file is properly secured and plugins/modules/themes are updated in time to lock any chances of compromise.