Article Discussion: Lock Down Your Website

With all the benefits of e-commerce there are dangers such as identity theft for consumers and cyber attacks on websites. Site owners need take preventative measures. Wellman presents some security procedures and scripts for PHP driven sites.


Read the full article here: Lock Down Your Website

It would have been nice at the end to point us to related articles with more information. And at the point where the other vulnerabilies were listed on page two it would have been nice to have been provided with a link to information regarding each specific potential hole and how to close it.

Thanks.

Lizard

nice article. I thought php is less powerful and secure than Perl and JSP

This article would be described as "journalistic" and lacking in substance. I would like to have seen a fact based article describing vulnerabilities experienced (along with proof of concept).{An article that would be quoted as authoritative and rolling up issues past and present}
- i.e. phpbb and phpnuke XSS scripting and MySQL injection attacks
- apache related attacks compared with php as an apache module
- issues such as those covered in this post http://forums.devshed.com/t20525/s.html