Information Security of PHP Applications

摘要

Exclusive flexibility in developing dynamic web applications, which PHP offers, makes it one of the most common Web programming languages today. The popularity of the language increases the number of web applications written in PHP and the questions with the security issues, which these applications arise. In this article we present strategies and best practices for developing secure code with PHP. We make brief overview of the main types of attacks, classified by CWE, which may affect the PHP applications and best practice how to avoid them.