Training, Open Source computer languages

PerlPythonMySQLTclRubyC & C++LuaJavaTomcatPHPhttpdLinux

Search our site for:
Home Accessibility Courses Diary The Mouth Forum Resources Site Map About Us Contact
Preventing injection attacks and other security lapses

Preventing injection attacks and other security lapses

If you're writing a public facing web site on which you invite your users to enter data, you need to ensure that a tiny minority of malicious users can't harm your site, nor gain access to information that they shouldn't be seeing. This is a huge subject that you'll need to be aware of in order to program to take care of the risks involved. Once you have a good understanding, you'll easily be able to protect against the most common problems and that understanding will also help you evaluate and deal with other risks that might be more application specific too. This illustration shows how you can "sanistise" incoming data from a web form, and sanitise the output to the browser too. Extra considerations are required when you're looking to prevent "injection attacks" to an SQL database - and they're easy enough to look at and deal with once you've considered your overall application design and strategy.

Associated topic - Perl - Network Security

Next ... random image ... a slide show ... image from list below


© WELL HOUSE CONSULTANTS LTD., 2008: Well House Manor • 48 Spa Road • Melksham, Wiltshire • United Kingdom • SN12 7NY
PH: 0800 043 8225 or 01225 708225 • FAX: 0845 8382 405 or 01225 707126 • EMAIL: info@wellho.net • WEB: http://www.wellho.net • SKYPE: wellho