Français
  • PHP MySQL Security Best Practices For Your Website and Server


    Added on Saturday 01 May 2010 16:07:27
    by flashbuilding
    14157 Views
    4.5 / 5
    12345
    63 rates
    Send this video to your friends
    Get embed code of video

    Learn best practices for securing your PHP and MySQL websites and applications. Here are the resources:

    http://php.net/manual/en/security.php

    http://developer.yahoo.com/security/

    http://www.phpfreaks.com/tutorial/php-security

    http://phpsec.org/php-security-guide.pdf



    facebook
  • Write your comment here...
  • Royalllllll

    most hackers is from rusia..and i really feel big respect if ppl who see holes in any website,he is helping admin with this,not using in bad way..
    Saturday 07 January 2012 14:39:35
  • mitnick911

    php-security-guide.pdf page is dead...
    Wednesday 09 November 2011 17:18:00
  • Foaman

    Yeah.  d-bags suck.
    Monday 15 August 2011 23:19:30
  • GamingJediPwns

    @fedeetz So when you catch a nasty virus that wipes out all the files on your computer its not the virus writers fault for being a retard and spending his/her obvious skills making destructive software when they could have been making games or something.
    Monday 01 August 2011 18:01:14
  • v8soup

    I so enjoy your videos. They're freaking hilarious! It makes programming fun! I laughed so hard during this one. Good job. programming and entertainment at the same time. Love your stuff!
    Saturday 09 July 2011 18:26:01
  • fleetstdemon1

    You make out in this video that your just trying to be helpful and direct people to some security information resources, when it is blatantly obvious that you are just sore at this guy for hacking your site and telling everybody how "weak" the site is/was. Now, making a video to tell people about an experience you had and how you felt about it is fine, but don't try to disguise it as a help video. You sound like a kid who's daddy pulled down his pants and spanked him in front of his friends.
    Saturday 09 July 2011 07:50:30
  • Frie666

    чето пиздит пиздит и нниачем, америкосы ебанутые, больше времени пиздят чем что то показывают
    Wednesday 22 June 2011 00:50:02
  • fedeetz

    You sound butthurt man, no offense. Instead of looking at scriptboys and self-proclaimed "hackers" as douche bags, you should look at them as annoying reminders of the security holes in your site. Is not their fault to be assholes and try to hack your page, is your fault to make shitty vulerable code and let them succeed
    Tuesday 17 May 2011 03:03:55
  • abakusdeb

    Have set up your php on my newsletter index page and not sure how to insert the filter coding into your index code. I have looked at the information, but am afraid by changing the inputed code that I will lose what I have in there - Scared!! Can you advise me what to do??
    Tuesday 01 March 2011 02:36:16
  • AILEENROBERTAify

    We have thousands of profiles for Naughty women mworld5.info
    Sunday 02 January 2011 09:40:14
  • Remi1115

    Hello. Can you maybe show us how you made a system that records when people try to hack your site? (Or if you think that it's not a good idea to show that on YouTube I understand). Remi1115
    Sunday 02 January 2011 09:13:38
  • sanikadisanyaka

    My name is Mike from LA Although there busizz4me.info
    Friday 24 December 2010 22:32:22
  • ranidymalshika

    Sexy Be Naughty women  benaughtyman.info
    Friday 17 December 2010 10:18:10
  • SRecordsdottk

    thanks
    Thursday 16 September 2010 10:56:03
  • micahblu

    Very Funny! Love the douche bag reference for the hackers! Great stuff!
    Monday 09 August 2010 16:25:59
  • BFBC2TipsNTricks

    Just finished your awesome playlist, thanks mate, your so good, and actually explain your tutorials and methods unlike the others who just say heres the whole source file, there you go, upload it and thats it, your amazing mate, cheers
    Sunday 13 June 2010 11:49:54
  • skierplaterandy

    @ra2yuri4 ah, good point. I don't use Shaw either, but its a really popular isp in the states i think. if you blocked out 1000 potential customers from your site every time you had someone try and hack it, your placing your site in a hard spot. A more popular site would probably have a lot of attempts to hack it. Idk, my site isn't popular enough for me to get actual figures.
    Monday 03 May 2010 08:12:54
  • shakaama

    so a "friend" told me he could hack my site in 2 seconds. I don't get it. My site is an info site for legal information. Other than erase what's there, what could he possibly do to my site? And yes i thought it was a very douche bag thing to even say. I mean, why even say something like that. That's like say, "oh hey i can screw your sister." I mean come on.
    Monday 03 May 2010 03:51:44
  • ra2yuri4

    @skierplaterandy I actually did here about that. I do think there is something already done about it though. I heard it was "IP reset" or something of the kind. I'm not familiar with how it works. I also don't use ShawCable. And that sounds impossible, unless the company only had 999 IP's to share. From what I know, most ISP's have a range from 15,700,000-60,000,000 different IP's around the world, and can only share a certain amount in depending on where you live.
    Sunday 02 May 2010 22:56:30
  • skierplaterandy

    @ra2yuri4 no, I'm not talking about static IPs. I'm talking about "machine names." it was referred in GRC's "Sheilds Up" tester, I'm just not entirely sure if you could use it as a way to block certain computers. The website also refers to is as a "reverse DNS." And think, what if a website blocked all users of Shaw Cable. A lot of traffic in north America goes through their service even if they aren't using that ISP, and thousands do use it.
    Sunday 02 May 2010 22:44:54
  • ra2yuri4

    @skierplaterandy there are billions of isp's and IP addresses in the world. Maybe 3 or 4 people may be restricted, but that is such a small number, and the chances of anyone in that range viewing your website is extremely low. Also, with IPv6 on its way, this will all be a thing of the past~ and what you're describing, is static-IP.
    Sunday 02 May 2010 22:34:58
  • skierplaterandy

    @ra2yuri4 yes, then the site developer shoots himself in the foot as he bans an entire ISP from viewing his website :) there is another way though, a lot of ISPs give a user a specific id that sticks with them for the life of their use, I'm not exactly sure how it works, but it is transferred to the server, and its unique to you always.
    Sunday 02 May 2010 21:38:32
  • ra2yuri4

    @skierplaterandy that doesn't work anymore. At least, not on the world wide web today. There are many ways around it. Its called, dynamic-IP range. Your ISP provides you a range of IP's, starting with xxx.yyy.zzz.(last 3 here). The most common way to ban a dynamic IP and making sure the same user with dynamic doesn't unplug his modem for a new one, you can block ip's by range.
    Sunday 02 May 2010 20:30:07
  • Zackary210

    Ya those people are douche bags.
    Sunday 02 May 2010 16:14:34
ADVERTISEMENT
Supplements
Social Network
Tag cloud