Top Ten Most Critical Web Application Security Vulnerabilities

Web application security is often viewed incorrectly as a set of server and host-based security issues, rather than code-level and configuration-based security vulnerabilities. Although servers and hosts may still be the cause for exploitations, it is critical that security professionals recognize the major impact of poorly written web applications as well as how their applications [...]

Using PHP Session Control To Implement User Authentication

A common method for determining user authentication is to use sessions and cookies via PHP Programming. It is straight forward to implement, easy to secure, and fun! Authentication can be used for many purposes in your PHP Programs, from membership login to Online data repository access. Whatever your purpose, PHP Programmers can use authentication to discern [...]

Building A Searchable eCommerce Web Database with PHP and MySQL

At the root of a successful eCommerce web site design is a searchable MySQL Database powered by PHP. Unless you only sell a few items that never change, you can expect your inventory to grow, require regular changes and additions, and keep you on your toes. It’s a whole different story from a point of [...]

Preventing SQL Injections In Secure PHP Programming

SQL Injection is a technique used by hackers to attack websites that accept GET or POST data. This is typically submitted to the server from web forms, but can be submitted directly to the web server using other methods besides a browser. The results of successful SQL Injection (and Code Injection) include accessing/modifying the MySQL [...]

PHP Headers: Status Code Definitions (Reference List)

The following list is taken from W3 and posted here for easy reference. These are to be used for various situations when you want to override the default status sent by the server. Situations include when your content is deleted, but you do not want the search engine to see a broken link or missing [...]

How To Send Data From Flash To ASP/PHP Without A Page Refresh

This article will deal the how to of sending form data from Adobe Flash to your PHP/ASP file so it can be inserted into a database (or manipulated for whatever other reason). The trick is making sure a new window doesn’t popup and the page doesn’t refresh to run through the ASP/PHP code. That’s the [...]

Automating Image Uploads And MySQL Database Tracking

These days everyone wants to upload their images to a web application. Whether it’s a free public site like Photobucket, or an eCommerce Web Site like Shutterstock or Flickr, the concepts are the same. The intent is to provide a system for web users with no web programming skills, which lets them upload a single [...]