We have all written scripts to upload files to a server, and for one reason or another I find that most of the time the script is intended for image uploads. Whenever you are uploading user files to the server it is very important that those files are validated to ensure the uploaded file is [...]
After posting Simple XSS Vulnerability according to my site stats, it seems there is a large number people interested in PHP security, more so than any other topic I have blogged about. Since I am no security expert I thought I would provide a few links to some quality resources on the net.
One of the [...]
I was recently taking a small quiz in PHP as part of a job interview (by the way if anyone knows of a job opening for a telecommuting contractor, please let me know). One of the questions posed contained this piece of code which has been slightly modified for our use.
<input type=”text” name=”order” value=”<?php echo $_POST['order']; ?>” />
Basically [...]