Thanks for the order!

Posted on June 13, 2009 by Marcus.

Whoever ordered the book PHP-Sicherheit via my amazon link - thank you for that. You won't regret it.

Of course, I also have this book in my bookcase. The co-author is Stefan Esser, reporter of a lot PHP-vulnerabilities, initiator of the month of PHP bugs and maintainer of the suhosin project.

The book is a must-have for administrators (of PHP applications) as well for PHP developers.

It starts with a chapter explaining how an attacker will work on getting as much information as possible of a to be attacked host. Besides that all types of vulnerabilities are explained. The authors give advices on how to harden your PHP installation and how to produce secure code. Finally, the authors present projects like suhosin as well as filter/IDS solutions like mod_security with whitelist or blacklist approaches.

It's worth every Euro!