Comments on: Secure PHP Programming!

By: Matthew

Matthew — Tue, 28 Aug 2007 15:58:36 +0000

I have login password string showing in the url string. This has a serious security implication as other users of a system can browse the history and discover the login password of the last user. I have used the POST method for the form tag but when you view the page information you see the password sticking out. So I would like to know of any means of preventing this completely or to encrypt the password.

Is it also possible to disable mouse “right click” completely for the length of the session.

I work with PHP and Javascript.

Thanks in anticipation of your urgent help.

matthew

By: Homayoon

Homayoon — Wed, 08 Aug 2007 06:27:34 +0000

Hi,
Good website, I love this subject. I have worked too much about web security.
anybody has anyquestion please send message.

By: Mann

Mann — Sat, 28 Jul 2007 01:12:04 +0000

Very informative. Thanks guys.

By: spatz

spatz — Thu, 26 Jul 2007 21:53:05 +0000

Never use $PHPSELF without checking the value.
Use $_SERVER['PHPSELF'] instead OR insert this code before

$PHP_SELF = htmlentities($_SERVER['PHP_SELF']);

By: [fazed]

[fazed] — Thu, 05 Jul 2007 19:37:13 +0000

Would Just like to point out that $PHPSELF can sometimes
be over written (check the hardened php project)