Php security

1.SQL injection
PDO
Mysqli

2.Xss Attacks
Pass html output through htmlentities or htmlspecialchars

  1. Index
    Turn off indexes in .htaccess

  2. Error reporting
    Turn off error reporting when website is live

5 .Clickjacking
X-frame Header options

Ongezeeni maexperts

1 Like

Hash your passwords. Keep config files where there’s no chance of nefarious access. Is using a framework instead of hand coding a security measure?

1 Like

floating here

Depends on the framework. Laravel is the best in terms of security.

1 Like

naona unapenda php sana, pale telekram tuko na php group rink nakutafutia

[QUOTE="Pos€i.Don, post: 647302, member: 1.SQL injection
PDO
Mysqli

2.Xss Attacks
Pass html output through htmlentities or htmlspecialchars

  1. Index
    Turn off indexes in .htaccess

  2. Error reporting
    Turn off error reporting when website is live

5 .Clickjacking
X-frame Header options

Ongezeeni maexperts[/QUOTE]

With the CMS craze (I prefer hard-coding scripts), make sure your config file is properly secured and plugins/modules/themes are updated in time to lock any chances of compromise.