PHP Security best practices

Question

I have implemented a project on PHP/MYSQL now i needs to secure my project, please let me know the security issues and how to tackle in PHP

Answer 1

go through link: http://phpsec.org/projects/guide/

Answer 2

See:

PHP Security Guide
Another Good Security Guide

Answer 3

I have implemented a project on PHP/MYSQL now i needs to secure my project

Here is your problem. Security should not be an afterthought.

But, to help in your task, check the OWASP top 5 for PhP, the rest of the site should also be read. I put together a list of things which we see often and need to be checked here also : http://stackoverflow.com/questions/2951917/historical-security-flaws-of-popular-php-cmss/2951991#2951991 (CSRF, password storage and parameterized queries are some of my pet peeves).

Answer 4

Sarfaz's links are a good place to start. Pay special attention to SQL Injection. This is the most common one I see in PHP applications.

Answer 5

One tip from me is to use mysqli with prepared statements. I think it's a good practice.

Answer 6

SO user bobince's only question to date deals with security-conscious PHP and is worth a read if you want to get deeply into the issue (which is the only real way of building secure software.)

Answer 7

Step 1) Use *mysql_real_escape_string()* on any incoming user input

Step 2) Read this: http://phpsec.org/projects/guide/

Answer 8

Easy total security in 2 steps:

1. Disconnect any network cables from the server hosting the application.
2. Disconnect any power cables from the server hosting the application.