Talk: "Grundlagen der sicheren PHP Programmierung - Teil 1"
The Cologne PHP Usergroup is a place where PHP programmers across all skill levels meet once in a months for a few beers, a little bit of "sport" and last but not least for a little bit discussion of PHP related topics.
At our September 2005 meeting a series of talks about the very basics of secure PHP programming was started. Part 1 mainly introduces the concept of never trusting userinput, the most common flaws based on parameter injection and the appropriate defenses. At the meeting a "live" demonstration of such holes were given, which is ommited from the downloadable talk.
Download this talk in AdobeAcrobat (.pdf), Microsoft PowerPoint (.ppt) or OpenOffice(.sxi) fileformat.