PRIVATE BUNDLE

PUBLIC BUNDLE

A (PHP) Security State of Mind

Links from the True North PHP 2012 presentation

Tweet

Bundle bitmarks

• websec.io - web application security

  websec.io/

  Added by enygmadae 6 months ago
  Info+ Tweet

• websec.io - An Introduction to Content Security Policy

  websec.io/2012/10/02/Intro-to-Content-Security-Policy.html

  Added by enygmadae 6 months ago
  Info+ Tweet

• shieldframework/Shield/Session.php at master · enygma/shieldframework · GitHub

  github.com/enygma/shieldframework/blob/master/Shield/Session.php

  Added by enygmadae 6 months ago

  • enygmadae:

    Encrypted Sessions Example

    6 months ago
  Info+ Tweet

• Category:OWASP WebScarab Project - OWASP

  www.owasp.org/index.php/Category:OWASP_WebScarab_Project

  Added by enygmadae 6 months ago

  • enygmadae:

    WebScarab OWASP page

    6 months ago
  Info+ Tweet

• Burp Suite

  www.portswigger.net/burp/

  Added by enygmadae 6 months ago
  Info+ Tweet

• Category:OWASP WebGoat Project - OWASP

  www.owasp.org/index.php/Category:OWASP_WebGoat_Project

  Added by enygmadae 6 months ago
  Info+ Tweet

• DVWA - Damn Vulnerable Web Application

  www.dvwa.co.uk/

  Added by enygmadae 6 months ago
  Info+ Tweet

• WebSec Quick Fix (websecquickfix) on Twitter

  www.twitter.com/websecquickfix

  Added by enygmadae 6 months ago
  Info+ Tweet

• websec.io - Can't Trust the $_SERVER

  websec.io/2012/08/11/Can't-Trust-the-$_SERVER.html

  Added by enygmadae 4 months ago

  • enygmadae:

    Values from the $_SERVER superglobal to watch out for

    4 months ago
  Info+ Tweet

• Zend Framework » \Zend\Escaper\Escaper

  framework.zend.com/apidoc/2.0/classes/Zend.Escaper.Escaper.html

  Added by enygmadae 4 months ago

  • enygmadae:

    Zend\Escaper (from Zend Framework v2)

    4 months ago
  Info+ Tweet

• symfony API » sfOutputEscaper Class | symfony | Web PHP Framework

  www.symfony-project.org/api/1_0/sfOutputEscaper

  Added by enygmadae 4 months ago

  • enygmadae:

    Symfony framework output escaper (v1)

    4 months ago
  Info+ Tweet

• Homepage - Twig - The flexible, fast, and secure PHP template engine

  twig.sensiolabs.org/

  Added by enygmadae 4 months ago

  • enygmadae:

    Twig templating system

    4 months ago
  Info+ Tweet

• HTML5 Security Cheat Sheet - OWASP

  www.owasp.org/index.php/HTML5_Security_Cheat_Sheet

  Added by enygmadae 4 months ago

  • enygmadae:

    OWASP HTML5 security cheat sheet

    4 months ago
  Info+ Tweet

• Web Application Security Guide/Checklist

  en.wikibooks.org/wiki/Web_Application_Security_Guide/Checklist

  Added by enygmadae 4 months ago
  Info+ Tweet

• PHP equal operator == reference table

  docs.google.com/spreadsheet/pub?key=0Apy5AGVPzpIOdHREMVpyU0JBak5GcURZZGpQbGRqb0E&output=html

  Added by enygmadae 4 months ago

  • enygmadae:

    Google Doc (Spreadsheet) of Equals Operator Handling in PHP

    4 months ago
  Info+ Tweet

• HTTPS Everywhere | Electronic Frontier Foundation

  www.eff.org/https-everywhere

  Added by enygmadae 4 months ago

  • enygmadae:

    HTTPS Everywhere

    4 months ago
  Info+ Tweet

• ModSecurity: Open Source Web Application Firewall

  www.modsecurity.org/

  Added by enygmadae 4 months ago
  Info+ Tweet

• Web Application Security Check List 2012

  www.google.com/url?sa=t&rct=j&q=&esrc=s&source=web&cd=3&ved=0CGAQFjAC&url=http://wasclist.googlecode.com/files/web_app_sec_checklist_2012_en.pdf&ei=AGvtUODlOOHS2wXxoYHYAg&usg=AFQjCNG5ubLcS85oolyvRq2DCSQQ9EbMKQ&bvm=bv.1357316858,d.b2I&cad=rja

  Added by enygmadae 4 months ago
  Info+ Tweet