Hi,
> I have created a site that allows users to schedule staff, make
> appointments
> etc. Users must log in to use the site and the users data is held in the
> Users table of the MySQL database. However, due to the nature of
> the site I
> need to make sure it is 110% secure against hacks etc. Now I know
> this isn't
> actually possible but I would appreciate any advice on how I can get it as
> secure as possible, I have no experience on this aspect of web
> development.
Turn off register globals. Validate all form posts for bogus data. Check
that the cookie hasn't been changed with bad characters malliciously.
Things like that. Try and break into the site w/o logging in. We paid for
a security audit from a company called @stake (www.atstake.com). If you can
afford it, I'd contract someone to audit you.
-Dan Joseph
--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php
