Re: is there a problem with php script pulling HTML out of database as it writes the page??
| From: | Stut | Date: | Thu, 17 Jul 2008 21:12:08 +0000 |
| Subject: | Re: is there a problem with php script pulling HTML out of database as it writes the page?? | ||
| References: | 1 2 3 4 5 6 7 8 9 10 11 12 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-277000@lists.php.net to get a copy of this message | ||
On 17 Jul 2008, at 21:56, Robert Cummings wrote:
On Thu, 2008-07-17 at 15:46 -0500, Micah Gersten wrote:My main point was that security is the responsibility of everyone on the team whether it's explicitly part of their job spec or not. A candidate who doesn't see that without prompting will not be getting any further in my interview process. -Stut -- http://stut.net/What can help is if one app only has access to it's own DB. Also, for mysql, there is the mysql_real_escape_string function for a reason.Well I agree with that of course... but the post by Stut indicated the interviewee thought he could punt all DB security to the DBA. Obviously it's important that the app developer use appropriate programming techniques to achieve security in conjunction with the DBA.