What are the possible security holes that exist in PHP programing. Weak PHP programming.
The primary response you will get is SQL injection from input not properly sanitized. Another possibility I can think of offhand is allowing scripts to be uploaded and subsequently executed. OReilly has a book on the topic also, oreilly.com/catalog/9780596006563, Essential PHP Security. Also check out the PHP security guide -
http://phpsec.org/projects/guide/
Have a look at this: Historical security flaws of popular PHP CMS's?
精彩评论