Penetration Testing: PHP Security from the Inside

[Erin Carroll <amoeba () amoebazone com>]

The following interview was published on SecurityFocus today:

PHP Security From The Inside
by Federico Biancuzzi
published 2007-02-05

Stefan Esser is the founder of both the Hardened-PHP Project and the PHP 
Security Response Team (which he recently left).
Federico Biancuzzi discussed with him how the PHP Security Response Team 
works, why he resigned from it, what features he plans
to add to his own hardening patch, the interaction between Apache and PHP, 
the upcoming "Month of PHP bugs" initiative, and
common mistakes in the design of well-known applications such as 
WordPress.
http://www.securityfocus.com/columnists/432



------------------------------------------------------------------------
This List Sponsored by: Cenzic

Need to secure your web apps?
Cenzic Hailstorm finds vulnerabilities fast.
Click the link to buy it, try it or download Hailstorm for FREE.

http://www.cenzic.com/products_services/download_hailstorm.php?camp=701600000008bOW
------------------------------------------------------------------------