looking for best practices for security for PHP commercial grade application

[NotGiven]

I posted here another thread so please forgive em for this intrusion as well
but it's really a different topic.

Where can I read /learn about best security preactices? Books web sites,
articles, ... are all welcome.

Many thanks.

[Aditya Ivaturi]

Re: looking for best practices for security for PHP commercial grade application

"NotGiven" <noname@nonegiv en.net> wrote in message
news:%%DKb.4549 3$yA6.33660@big news1.bellsouth .net...[color=blue]
> I posted here another thread so please forgive em for this intrusion as[/color]
well[color=blue]
> but it's really a different topic.
>
> Where can I read /learn about best security preactices? Books web sites,
> articles, ... are all welcome.
>
> Many thanks.
>[/color]

Man, you are restless anyways, if you need a start
http://java.sun.com/webservices/docs...pSecurity.html.
Understandably it is for Java, but concepts should not be vague as it
pertains to untrusted zone (internet). Go through it including pages linked
within. That will give you an overall idea of a security model, then port it
for your application.

--Turi

[NotGiven]

Re: looking for best practices for security for PHP commercial grade application

thanks.


"Aditya Ivaturi" <aivaturi@aijal on.net> wrote in message
news:XlEKb.2183 03$Eq1.44487@tw ister.rdc-kc.rr.com...[color=blue]
> "NotGiven" <noname@nonegiv en.net> wrote in message
> news:%%DKb.4549 3$yA6.33660@big news1.bellsouth .net...[color=green]
> > I posted here another thread so please forgive em for this intrusion as[/color]
> well[color=green]
> > but it's really a different topic.
> >
> > Where can I read /learn about best security preactices? Books web[/color][/color]
sites,[color=blue][color=green]
> > articles, ... are all welcome.
> >
> > Many thanks.
> >[/color]
>
> Man, you are restless anyways, if you need a start
> http://java.sun.com/webservices/docs...pSecurity.html.
> Understandably it is for Java, but concepts should not be vague as it
> pertains to untrusted zone (internet). Go through it including pages[/color]
linked[color=blue]
> within. That will give you an overall idea of a security model, then port[/color]
it[color=blue]
> for your application.
>
> --Turi
>
>[/color]