Security Basics mailing list archives

Re: Re: PHP filter function against SQL injections


From: ianbow () hotmail com
Date: 14 Feb 2007 12:10:52 -0000

The best method would be to use mod_secuirty on your server, link (http://www.modsecurity.org/index.php)

As you would have a manmouth task trying to defend your web site via the web application.  And to be honest would be 
impossible due to some of the more inherent problems with PHP.  I'd concentrate on reducing the risk of attacks such as 
SQL injections etc and leave the real security to server Admins.  Unless you want to help the securing of the PHP 
language?


Current thread: