Security

• Introduction
• General considerations
• Installed as CGI binary
  • Case 1: only public files served
  • Case 2: using --enable-force-cgi-redirect
  • Case 3: setting doc_root or user_dir
  • Case 4: PHP parser outside of web tree
• Installed as an Apache module
• Filesystem Security
• Database Security
  • Connecting to Database
  • Encrypted Storage Model
  • SQL Injection
• Error Reporting
• Using Register Globals
• User Submitted Data
• Magic Quotes
  • Why use Magic Quotes
  • Why not to use Magic Quotes
  • Disabling Magic Quotes
• Hiding PHP
• Keeping Current