| Home : PHP : Articles, Tips & Tutorials : Security |
| Click "Subscribe" if you want to be notified of new or updated links in this category. | Subscribe |
|
Security Listings |
|
Total:
9 | Displaying: 1 - 9 |
|
|
How to protect images without htaccess using PHP
|
Website
Refer
Review It
|
On numerous occassions I have been asked how to serve images from a non-web accessible directory. A lot of sites now a days sell content and with the latest in php technologies like sessions and such, people like to use session management and authentication on their websites, without using .htaccess files in their directory. The easiest solution to protecting images is by reading them from a directory outside the document root on the webserver and serving it to another php script. This helps in two ways...
Updated: 02/14/2004
|
|
Protecting PHP Scripts with HTTP Authorization
|
Website
Refer
Review It
|
People like and have always liked keeping secrets. It`s in the essence of man. So there are times when you want to write a PHP script accesibile only to you, or a select few. The answer to your needs is using a password. There is more than one way to password-protect a script, but we`re going to talk about the most efficient one: HTTP Authorization, as implemented in PHP. HTTP Authorization has been available for some time now, and is usually achieved by using ...
Updated: 02/14/2004
|
|
Hide Your PHP For Security
|
Website
Refer
Review It
|
For some people announcing what type of web applications you run may be undesirable. If you are developing in PHP and you want to hide the fact that you are using PHP, this tutorial will cover some steps to achieving this. Right now you might be scratching your head wondering why, but this is a very common question that we have received. So, it`s time to put on a set of beer goggles to the world and hide that PHP you`re running on your web server...
Updated: 02/14/2004
|
|
A Complete, Secure User Login System
|
Website
Refer
Review It
|
When I started seeing spam messages posted to the new column annotation system, I knew I would have to create some sort of user authentication system that helps weed out the losers. I`m the type that would rather write an entire library myself than try to learn something like PHPLib or other similar libraries...
Updated: 02/12/2004
|
|
Checking Data
|
Website
Refer
Review It
|
Trust is everything in this day and age. You have to trust a lot of people, from the guy who gives you directions to your local plumber. After all, you`re not always the authority. However, when developing applications for the web, you must assume the role of authority. Otherwise, the user will assume the role, which is a big gamble: total data integrity, data corruption, or diversion of data -- if the user is the authority, you don`t know what the results will be...
Updated: 02/12/2004
|
|
Validating Incoming Clients for Anonymous Proxy Use
|
Website
Refer
Review It
|
Anyone who has administered or moderated an IRC channel, bulletin board site or similar will recognize the scenario. A troublemaker, whether because what they`re posting is abusive, illegal or just simply against the terms of service of the site or server in question is banned and reappears under a new identity and new IP address, courtesy of a proxy that has been left wide open and where the system administrator is, unsurprisingly, reticent in responding to your emails pleading with them to tighten up their security...
Updated: 02/12/2004
|
|
HTTPS Transactions via PHP
|
Website
Refer
Review It
|
With more and more e-commerce sites popping up around the world, the amount of transaction servers will need to grow to support them all. Many of the newer e-comms providers have made life easier for us developers by developing a web based environment to execute their transactions. Let me explain...
Updated: 02/12/2004
|
|
|
Running PHP Scripts Securely
|
Website
Refer
Review It
|
Connecting to a database requires that passwords be included in the script at some point. Other scripts you write may include sensitive information. This information may be exposed if you do not wrap your PHP scripts. Protecting your scripts from prying eyes is called wrapping. When you wrap a script, it is called by another script that hides your script and performs a number of security checks to ensure only authorized use is made of it...
Updated: 02/12/2004
|
|