Friday, October 22, 2004

Security for Middleware

The ColdFusion Developer's Journal has published the Top 10 Web Security Tips. Although this is written using ColdFusion references, the concepts are applicable to PHP, Asp, etc. For serious web application programmers this is a must read!

  1. Have an Error Handler
  2. Prevent Cross-Site Scripting
  3. Remove Dangerous Characters
  4. Prevent Fake Form Submits
  5. Stop Unauthorized Data Mining
  6. Validate Parameters and Prevent SQL Injection Attacks
  7. Use Server-Side Validation to Back Up Client-Side Validation
  8. Harden Your Logon Code
  9. Prevent Timeout Client/Session Backdoors
  10. Avoid Trojan Horse Uploads

reprinted from Reality Me


Posted by: djuggler | 11:50 PM |