Guideline on PHP web application Security

[Clydebrown]

When you are developing your web application then Security should be the main concern during the developmental process. There are several factors you should consider to protect your web application from possible misuse. This post will enlighten us on the basics of PHP security. There are several issues that web developers should be aware of which are given below:

• Input Filtering : Filtering entire data from external sources.
• Output Filtering : Filtering entire data that results from the application.
• Database Queries should be error free.
• Hiding the display Errors.

[tangoforce]

Originally Posted by Clydebrown

• Hiding the display Errors.

In a well written app there shouldn't be any errors yet alone any need to hide them. Instead you should be logging errors and handling them transparently so that the end users use of the site isn't disturbed.

FYI I'm a bit puzzled by your post. It comes across as a cross between a book / tutorial yet you've not really actually provided much more than an opening paragraph which is a bit odd for your first post. I thought it was spam but when I quoted your text there were no hidden image or url tags like most of the spam bots

[TylerB]

Yeah this isn't much of a guideline at all... What exactly did you just enlighten us on?

[Inigoesdr]

Originally Posted by tangoforce

In a well written app there shouldn't be any errors yet alone any need to hide them. Instead you should be logging errors and handling them transparently so that the end users use of the site isn't disturbed.

Disabling display_errors in a production environment is best practice. Logging and handling errors is good, but showing errors to the user is sure to disturb them the most.