PHP Hacks : Tips & Tools for Creating Dynamic Web Sites (Hacks)

Pro PHP Security (Pro)

PHP 5 Objects, Patterns, and Practice

Ajax in Action

Php Books

Essential PHP Security

Format: Paperback
Author: Chris Shiflett
ReleaseDate: 01 November, 2005
Publisher: O'Reilly Media
Rating:

VERY VERY HIGHLY RECOMMENDED!!


Shiflett, begins by giving an overview of security principles and best practices. Are you a developer who is writing insecure PHP code? If you are, then this book is for you! Author Chris Shiflett, has done an outstanding job of writing a practical book that will help you improve your PHP application-level security. Then, the author covers form processing and attacks such as cross-site scripting and cross-site request forgeries. He continues by focusing on using databases and attacks such as SQL injection. Then, the author explains PHP's session support and shows you how to protect your applications from attacks such as session fixation and session hijacking. Then, he covers the risks associated with the use of includes, such as backdoor URLs and code injection. Next, the author discusses attacks such as filesystem traversal and command injection. Then, he shows you how to create secure authentication and authorization mechanisms and how to protect your applications from things like brute force attacks and replay attacks. Finally, the author explains the inherent risks associated with a shared hosting environment.

This most excellent book brings long-needed security guidelines to PHP developers everywhere. More importantly, the content of this book will be an asset to your development teams.
.

Essential for the Beginner or Advanced PHP developer
Though the book is short in length, it is very rich in content. As a very security conscious developer, I found this book to be a GREAT resource to my library. Chris does a GREAT job of presenting the problem (citing specific examples of the exploits), showing the pitfalls, and then presenting the solutions.

He is very thorough in his descriptions, and his easy to understand writing and use of analogies made this a very simple concept to grasp. If you are a seasoned PHP developer, or just beginning programming PHP - his writing style helps you to understand the underlying attack, visuals to see it in action, and how to prevent being attacked - it is very simple, yet deep.

Reading this book has helped me to see where my applications may fall short, and what I can do to protect them. Especially in the realm of PHP developers, there are MANY Open Source options out there, and many of them lack the security that is mentioned in the chapters of this book. Don't let yourself get caught!

I recommend this book, and performing an audit of your own work. Excellent book!.

Not Bad
I like author's princle about how to filter tainted input and his code snippets are short and understandable. This handy book fecth most recent popular attacks, and roughly coveres most general attacking means and how to secure your website.But this book comes with quite much minor errors; chapters seem little bit repetitive and redundant and most codes are not talked in depth. If you were a php newbie, and wish to know more php security related features or you want a short, handy cookbook which provides a quick reference, you should pick up this book.