PHP manual - Security
Main
PHP tutorials
Downloads
Guestbook
Message board
Contacts
Links
PHP Manual
I.
Introduction
II.
PHP Reference
III.
PHP Security
IV.
Features
V.
Functions
Part II
Part III
Part IV
VI.
PHP Api
VII.
FAQ
VIII.
Appendixes
IX.
HTML Help
III.
Security
1.
Security
General considerations
Installed as CGI binary
Possible attacks
Case 1: only public files served
Case 2: using --enable-force-cgi-redirect
Case 3: setting doc_root or user_dir
Case 4: PHP parser outside of web tree
Installed as an Apache module
Filesystem Security
Database Security
Designing Databases
Connecting to Database
Encrypted Storage Model
SQL Injection
Error Reporting
Using Register Globals
User Submitted Data
Hiding PHP
Keeping Current
