|
Protect Your Website From Leaching Programs
|
Other links at PHP > Tutorials > Security |
| 1. |
How to protect PDF files using PHP
|
|
|
This tutorial explains how to safely hide away PDF files from public access using htaccess, but then having a PHP file run its own authorization to allow access to the file without the Network Password dialog box. The PDF file will be displayed in the browser (if the user has acrobat reader) or promoted to download the pdf file if the user doesnt have acrobat reader. This is perfect for when you want to restrict PDF files to authorized eyes only. This simple to use tutorial will have you up and running in a few minutes, one page of info with full source code, and working examples.
|
| 2. |
AutoStumbler
|
|
|
There is a new community tool called StumbleUpon which makes web browsing seem like channel surfing with a television. This little piece of HTML tricks StumbleUpon into automatically voting a page up. You need to have StumbleUpon installed for this to work. This is meant as a demonstration of a vulnerability which affects several community sites, not only StumbleUpon.
|
| 3. |
Writing Secure PHP Code
|
|
|
This article will guide you through writing secure PHP code and covers many of the common security pitfalls one will encounter while making php applications. Covers things such as register globals, SQL injection, include files, and demonstrates how to protect against those kind of attacks. Anyone new to PHP, and even some more experianced people, should read this before deploying thier application.
|
| 4. |
Running PHP Scripts Securely
|
|
|
Connecting to a database requires that passwords be included in the script at some point. This information may be exposed if you do not wrap your PHP scripts. Protecting your scripts from prying eyes is called "wrapping." When you wrap a script, it is called by another script that hides your script and performs a number of security checks to ensure only authorized use is made of it. This article covers how to use a script wrapper.
|
| 5. |
Crypt and User Validation
|
|
|
Tutorial covering the basics of encryption and how to apply it to user validation, including a sample script to try out.
|
|
|