Re: Comments on PHP security
| From: | Mathieu CARBONNEAUX | Date: | Fri, 12 Jan 2007 14:54:30 +0000 |
| Subject: | Re: Comments on PHP security | ||
| References: | 1 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-27399@lists.php.net to get a copy of this message | ||
_____
From: Vlad Bosinceanu [mailto:vladb@pseudo-infinity.ro]
What might help is pushing (via the manual) for the adoption of tools
that prevent common problems, with pdo's prepared statements being one
such tool.ok, documenting is what i say...
but not all use php5 pdo... not all use php5... many use php4...
in some php sql driver implementation have prepare statement... but not all...
oci8 has, mysql no...why...
in the same idea of the portal (my last post...), the net has many information how to developpe
securily but you must search this information.... for experienced programmer is not a probleme...
but for beginer... where, what to search!!??
if this portal is directly visible from www.php.net is more simple to search...
and if this portal link to this information...
Regards,
Mathieu