Auditing PHP: Understanding register_globals

 ( 199 days 19 hours ago)

LinuxSecurity.com: Conduct your audit on an exact copy of your production environment. You don't need to duplicate the hardware, but you want to make sure the software versions are as close as possible. The PHP configuration must match exactly, as specified in the php.ini file, the Apache directives in .htaccess files, or httpd.conf. You need a separate environment because you will display and log errors that might reveal sensitive passwords and other information. Also, you will try to break the security of the site, which is something you want to avoid with live applications. Preforming security audits on you our PHP application is an important skill to have. This article will show you this in great detail, where any PHP developer can increase their web application security.