Securing PHP Applications: Stopping SQL Injection with Prepared Statements
One line of careless PHP is all it takes. A login form that drops a username straight into a query string,
secure coding
How to Migrate Legacy PHP Code to Object-Oriented Structure with PDO
You inherit a PHP app that works. It also has SQL queries built by gluing strings together, database calls scattered through
How to Migrate from mysql_* to PDO in PHP for Better Security
You upgrade a server, run your app on PHP 7, and half of it goes dark. The culprit is almost always
How to Secure Your PHP Application by Using Prepared Statements
Here’s a bug that has burned more developers than almost any other: you drop a variable straight into a SQL string,
Understanding and Preventing XSS Attacks in JavaScript Applications
One malicious string in the wrong text box, and an attacker is running code inside your users’ browsers, on your domain,
Upgrading PHP: Replacing Magic Quotes with Proper Input Sanitization
If you have ever inherited an old PHP codebase, you have probably met magic_quotes_gpc. It was PHP’s attempt to keep you
Understanding JavaScript Prototype Pollution and How to Prevent It
You merge a chunk of user-supplied JSON into a plain object. Looks harmless. A moment later every object in your app