Tag Archives: Security Sites

PHP security

Hello there all, I’m using a mysqli database network, I currently have connect script such as username/password for database on my catalog page, this cannot be seen on watch source but My organization is wondering whether I should squeeze connect script around an external file on a password protected patch of the site. How is it possible for anyone to actually view the documents on my server Thanks before hand No fact that that. Hacking through the particular webhost shared server is the way in, just in case someone did this, it would not matter the place that the file was found. Leave your join script where it truly is. Thanks for ones response… that’s one less thing to be concerned about. When I mastered that at school i was told it had been fairly safe the way you did it, but being truly safe use a link to a strong external db connection page rather than in the similar location as your complete other files. Wouldnt make a scrap of difference – each of the persons then have to do is examine the ‘include’ place, and bingo – they’ve the file. You don’t have true secure way of storing … Continue reading

Posted in Web Design | Tagged , , , , , , , , , , , , | Leave a comment

Security Do’s and Dont’s for E-Commerce

Greetings, Im pretty much to start a new E-Commerce site and want to get all the safety issues dealt with for the begginning rather as compared to half way through just like the last time that is quite alot on the pain. Here are your 3 main things which i should of known at first of the previous project: ONE. MD5 Encrypt the passwords if they get written into the database. I didnt use this untill after Inside diameter setup several diverse user systems that will needed this so were required to go back through all of the code and change it all accordingly which also caused issues with several user accounts I’d already created. ONLY TWO. Escape any files getting written to the DB so challenging users cant go SQL commands by means of an input box. I also decide to put limits on the quantity of characters that may be entered into input fields THREE. Store database details from the site root so nobody has having access to them. Those include the first few there are various top of my own head but provides anyone else got worthwhile tips for security included in E-Commerce sites.

Posted in Web Design | Tagged , , , , , , , , , , , , , , , , , | Leave a comment