savitas
realin
solidstonePHPCamp is place to share news, views and articles that are useful to PHP community.
Login to share your opinion
Attack on WordPress Blogs on RackSpace
submitted by 
This year we regularly see how hackers exploit security holes in infrastructure of large shared hosting providers to compromise thousands legitimate websites of their clients.… read more
Security Talk: Fortifying Your Joomla! Website
submitted by
Even if Joomla! is one of the safest Content Management Systems available, Joomla! Websites get hacked every day.
Just because you are using Joomla!,… read more
Prevent your CSS and Javascript files from being cached
submitted by 
Sometimes you just don’t want your CSS or Javascript files to be cached. For instance, I don’t feeling like having to explain to a customer… read more
20 Steps to a Flexible and Secure WordPress Installation
submitted by
A comprehensive WordPress installation, albeit simple to produce, often requires multiple steps — many of which can easily be omitted accidentally. How many times have… read more
Fixing Codeigniters Database session
submitted by 
The closest thing to a fix for Codeigniter's session bugs destroying sessions prematurely. read more
Securing Your PHP Website
submitted by
You can also hide, or at least obscure, the fact that you’re using PHP to drive your site. Use the expose_php directive to prevent PHP… read more
Salting Passwords in DB or Across the Wire?
submitted by
One of the sessions at SxSW talked about the importance of salting passwords in the database in case an attacker gains database access. The assertion… read more
IE Blocking iFrame Cookies
submitted by
I got a call today about one of my applications not running correctly from inside an iFrame. I tried it out and it looked like… read more
Prevent Your Website From Hacking
submitted by
Regarding the use of Internet, particularly the World Wide Web (WWW) service, the world is going through an evolution phase. Today every big company or… read more
web2project Security Vulnerability
submitted by
It turns out that web2project was vulnerable to a handful of select Cross Site Scripting (XSS: definition) vulnerabilities. While the attack vector was pretty specific… read more
Mitigate the Security Risks of PHP System Command Execution
submitted by
As the Web continues its march towards becoming the de facto interface for the world's software applications, developers must find effective ways to not only… read more
Single Sign-On authentication using OpenID and other security measures
submitted by
The authentication of the PHPClasses site users will be changed to work in a separate site. It will use the OpenID protocol, so you do… read more
Auth/ACL implementation strategies
submitted by
I'm going to talk more about ACLs than Auth. Auth is simple, it's the ACL that will trip you up. Since both concepts are coupled… read more
HTML Sanitisation: The Devil's In The Details (And The Vulnerabilities)
submitted by
In this article, I take a look at some of the solutions PHP developers rely upon to perform HTML Sanitisation. Mostly because few others have… read more
Update your WordPress
submitted by
This week at Black Hat conference in Las Vegas, security company Qualys presented and released BlindElephant, a utility that scans web sites for insecure web… read more
Securing MySQL in 10 minutes
submitted by
Much like my last entry on memcache, I'm not trying to write the ultimate security guide for securing a mysql server... I'm just outlining the… read more
Genius Open Source Libraries
submitted by
When the right tool for the job doesn’t exist, you build it. We came up with a set of functions to sanitize tainted data in… read more
Possible vulnerabilities found in PHP session IDs
submitted by
Seclists.org has posted an advisory titled “Weak RNG in PHP session ID generation leads to session hijacking.” RNG stands for Random Number Generation, and the advisory… read more
The prefix has nothing to do with telephony
submitted by
When dealing with website security, most web masters think only about fending off potential attacks. However, we are all human. No matter how hard we… read more
MOPS-2010-022: PHP Stream Context Use After Free on Request Shutdown Vulnerability
submitted by
PHP uses the stream context during stream destruction, although it was already freed in the request shutdown before. read more
