Web Security 1. Keep softwares up to date Many developers prefer to use old version of software because they are more familiar with that version. This may cause security breach. So, it is recommended to always stay updated with latest version. 2. Prevent SQL Injection SQL Injection is one of the most used attack to harm website. SQL Injection can be prevented by using prepared statement or using PDO (PHP Data Object). In prepared sql statement a placeholder is used instead of mixing user inserted data in sql statement. 3. Prevent XSS Attack XSS (Cross-Site Scripting) is use to insert malicious javascript code to a web page which can be use to steal cookies or other informations from browser. To prevent this type of attack clean user input before displaying it to webpage. 4. Double form validation Form validation should be done on both client side and server side. Client side validation is done with javascript which user can manually disable in h...
A personal blog exploring ideas across technology, society, history, mythology, and the modern world.
Comments
Post a Comment