Modern PHP Security Part 2: Breaching and hardening the PHP engine
We go into specific bugs that can get around the PHP engine’s security boundaries, and tips on additional security layers that will lessen the damage when breached.
Uncategorized
Modern PHP Security Part 1: bug classes
In this blog, security researcher and Detectify Crowdsource hacker Thomas Chauchefoin (@swapgs) and fellow security researcher Lena David (@_lemeda) discuss modern bug classes in PHP. …
SQLi in INSERT worse than SELECT
SQL Injection in INSERT can be used not only to extract data, but also add/modify data in the table used in the query. This post describes how.