Training, Open Source computer languages

PerlPythonMySQLTclRubyC & C++LuaJavaTomcatPHPhttpdLinux

Search for:
Home Accessibility Courses Diary The Mouth Forum Resources Site Map About Us Contact
Preventing injection attacks and other security lapses

Preventing injection attacks and other security lapses

If you're writing a public facing web site on which you invite your users to enter data, you need to ensure that a tiny minority of malicious users can't harm your site, nor gain access to information that they shouldn't be seeing. This is a huge subject that you'll need to be aware of in order to program to take care of the risks involved. Once you have a good understanding, you'll easily be able to protect against the most common problems and that understanding will also help you evaluate and deal with other risks that might be more application specific too. This illustration shows how you can "sanistise" incoming data from a web form, and sanitise the output to the browser too. Extra considerations are required when you're looking to prevent "injection attacks" to an SQL database - and they're easy enough to look at and deal with once you've considered your overall application design and strategy.

Associated topic - Perl - Network Security

Next ... random image ... a slide show ... image from list below


You can Add a comment or ranking to this page

© WELL HOUSE CONSULTANTS LTD., 2012: Well House Manor • 48 Spa Road • Melksham, Wiltshire • United Kingdom • SN12 7NY
PH: 01144 1225 708225 • FAX: 01144 1225 899360 • EMAIL: info@wellho.net • WEB: http://www.wellho.net • SKYPE: wellho