Re: Re: test security of code
| From: | gustav at varupiraten dot se | Date: | Wed, 08 Mar 2006 08:28:26 +0000 |
| Subject: | Re: Re: test security of code | ||
| References: | 1 2 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-231646@lists.php.net to get a copy of this message | ||
> Gregory Machin wrote:
>> Hi
>> Is there an application that can pass source code and report potential
>> security problem and or the live site ?
>> Many thanks
>> --
>> Gregory Machin
>> greg@linuxpro.co.za
>> gregory.machin@gmail.com
>> www.linuxpro.co.za
>> www.exponent.co.za
>> Web Hosting Solutions
>> Scalable Linux Solutions
>> www.iberry.info (support and admin)
>>
>> +27 72 524 8096
> Nothing that would find every security hole.
> Because every developed site is different, has different variables, uses
> probably flash/cgi/javascript and a MySQL/PostgreSQL/MSAccess Database
> and so on.
>
> There will be never such a program that can do your specific security
> test, or it would just cost thousands of dollars and would have to keep
> better up to date than the developer of your applications.
>
> Best thing is always to test it yourself!
>
> Write down what function you have and what it does, then think about how
> somone could breach in.
>
> I know there are some people offering such a service.
>
> Probably it's that what you search for ;)
>
> Greets
> Barry
> --
> Smileys rule (cX.x)C --o(^_^o)
> Dance for me! ^(^_^)o (o^_^)o o(^_^)^ o(^_^o)
>
> --
> PHP General Mailing List (http://www.php.net/)
> To unsubscribe, visit: http://www.php.net/unsub.php
>
>
Or why not post to the list directly... and ask if WE see anything :-)
Best regards
/Gustav Wiberg