Have Geek Brain

Is there any system for checking PHP script security or not?

Is there any system for checking php script security?

+2


a source to share


2 answers


Is there any system for verifying that a php script is safe or not?

First, make sure you try to make your application as secure as possible. And yes, you could use the famous Acunetix Web Vulnerability Scanner .

Some of the features include:

  • SQL Injection
  • Cross-site scripting
  • Web security
  • Directory traversal
  • Ajax application security
  • Google Hacking


Recommedation:

I would recommend that you implement a very famous HTML cleaner in your projects :

HTML Cleaner is a standard compliant HTML filter library written in PHP. The HTML cleaner will not only remove all malicious code (better known as XSS) with a thoroughly checked, robust permissive whitelist, it will also ensure that your documents are standards compliant, something only achievable with the full W3C. Tired of using BBCode due to the current landscape, inadequate or insecure HTML filters? Do you have a WYSIWYG editor but has never been able to use it? Looking for high quality, standards compliant, open source components for this app you are building? HTML Cleaner for you!

+3


a source


Code review .



You can catch a bunch of things by having complex coding standards and using tools like php Code Sniffer / comparable (for example, make sure SQL queries are always parameterized) or using other tools (like Sarfraz suggested or wrote unit tests with PHPUnit . which check your code for vulnerabilities), but there are almost no situations where reviewing your code would be unnecessary. (I can't think of one hand to hand, but that doesn't mean they don't exist.)

+3


a source






More articles:


All Articles