Comments on: 5 Basic PHP Security Tips http://www.ultramegatech.com/2009/08/5-basic-php-security-tips/ Web development blog Wed, 11 Apr 2012 03:57:31 +0000 hourly 1 http://wordpress.org/?v=3.3.1 By: Steve http://www.ultramegatech.com/2009/08/5-basic-php-security-tips/comment-page-1/#comment-306 Steve Fri, 04 Sep 2009 17:07:54 +0000 http://www.ultramegatech.com/blog/?p=627#comment-306 Looks like the site went down for a while, but it appears to be back now. Looks like the site went down for a while, but it appears to be back now.

]]> By: keogh http://www.ultramegatech.com/2009/08/5-basic-php-security-tips/comment-page-1/#comment-303 keogh Fri, 04 Sep 2009 00:06:42 +0000 http://www.ultramegatech.com/blog/?p=627#comment-303 The link for the PHP Security Guide is broken The link for the PHP Security Guide is broken

]]> By: Steve http://www.ultramegatech.com/2009/08/5-basic-php-security-tips/comment-page-1/#comment-287 Steve Wed, 02 Sep 2009 16:30:09 +0000 http://www.ultramegatech.com/blog/?p=627#comment-287 That's true, but there are more ways to trick a browser into silently sending a GET request than there are with POST. That tip is more to protect users on the client side rather than protecting your server from attacks. That’s true, but there are more ways to trick a browser into silently sending a GET request than there are with POST. That tip is more to protect users on the client side rather than protecting your server from attacks.

]]> By: maholtz http://www.ultramegatech.com/2009/08/5-basic-php-security-tips/comment-page-1/#comment-281 maholtz Wed, 02 Sep 2009 07:30:27 +0000 http://www.ultramegatech.com/blog/?p=627#comment-281 "Use POST for Dangerous Actions" there is no difference between POST or GET. You can send POST Request with Javascript or use some firefox plugins. IMHO the only difference is, that usually GET will be in your webserver Logfiles where POST is not. “Use POST for Dangerous Actions”

there is no difference between POST or GET. You can send POST Request with Javascript or use some firefox plugins. IMHO the only difference is, that usually GET will be in your webserver Logfiles where POST is not.

]]>