Revision history for SecurePHP


Revision [842]

Last edited on 2017-02-10 20:49:00 by WojciechLisiewicz
Additions:
see http://wdb.fh-sm.de/ProgrammierenMitPHP

Deletions:
- do not use "register globals"
- /etc/php.ini > register_globals = OFF
- if you use "register_globals", then initialize every variable!
- do not trust incoming data
- you shouldn't use "include($_GET['seite']);"
- use safe settings in your APACHE / PHP configuration
- [[http://www.php.net/manual/de/features.safe-mode.php SafeMode]] in php.ini
- OpenBasedir in httpd.conf
-

Revision [269]

Edited on 2007-06-16 07:44:33 by WojciechLisiewicz
Additions:
- use safe settings in your APACHE / PHP configuration
- [[http://www.php.net/manual/de/features.safe-mode.php SafeMode]] in php.ini
- OpenBasedir in httpd.conf

Deletions:
- use "open_basedir" and other safe settings in your APACHE / PHP configuration
- [[http://www.php.net/manual/de/features.safe-mode.php SafeMode]] in php.ini and httpd.conf

Revision [268]

Edited on 2007-06-16 07:43:24 by WojciechLisiewicz
Additions:
- [[http://www.php.net/manual/de/features.safe-mode.php SafeMode]] in php.ini and httpd.conf

Deletions:
- WebserverSafeSettings in php.ini and httpd.conf

Revision [266]

Edited on 2007-06-14 07:34:58 by WojciechLisiewicz
Additions:
- WebserverSafeSettings in php.ini and httpd.conf

Deletions:
- SafeSettings in php.ini and httpd.conf

Revision [265]

Edited on 2007-06-14 07:34:33 by WojciechLisiewicz
Additions:
- use "open_basedir" and other safe settings in your APACHE / PHP configuration
- SafeSettings in php.ini and httpd.conf

Deletions:
- use "open_basedir" in your APACHE / PHP configuration
- UseOpenBasedir

Revision [264]

Edited on 2007-06-13 22:42:25 by WojciechLisiewicz
Additions:
- use "open_basedir" in your APACHE / PHP configuration
- UseOpenBasedir
-

Revision [263]

Edited on 2007-06-13 07:11:26 by WojciechLisiewicz
Additions:
- if you use "register_globals", then initialize every variable!

Revision [262]

Edited on 2007-06-13 07:06:58 by WojciechLisiewicz
Additions:
- /etc/php.ini > register_globals = OFF

Deletions:
- /etc/php.ini >> register_globals = OFF

Revision [261]

The oldest known version of this page was created on 2007-06-13 07:06:15 by WojciechLisiewicz
Valid XHTML :: Valid CSS: :: Powered by WikkaWiki