25 Years of Programming Community Forum
Blog  Sitemap  Services
May 20, 2013, 09:01:39 PM *
Welcome, Guest. Please login or register.

Login with username, password and session length
News: If you want email notification when someone replies to a topic, click the topic's Notify button.
 
   Home   Help Search Login Register  
This is a link to the Chat Room (for Firefox+ChatZilla) when you are logged in.
View help topic about using Live Chat
Pages: 1   Go Down
  Print  
Author Topic: PHP.INI Blog and New Version of PHP  (Read 539 times)
0 Members and 1 Guest are viewing this topic.
zorgat
Newbie
*
Offline Offline

Posts: 1


« on: July 08, 2012, 08:29:34 PM »

Hi All,

I read the PHP.INI and Security Issues Blog on this website and was wondering if the newest version of PHP 5.4.4 has addressed some of the issues. I'm trying to use php to secure web pages on my photography site.

Do I still have to apply the same set of directives to the php.ini file?

TIA

Zorgat
Report to moderator   Logged
SteveW
Administrator
Sr. Member
*****
Offline Offline

Posts: 285


WWW
« Reply #1 on: July 09, 2012, 04:27:04 AM »

Yes, I still recommend the same set of php.ini directives as best practices. I don't have the just-released PHP version, but it looks to me like all the current settings recommendations are still applicable.

They mostly are not related to "bugs" in PHP, anyway, but to features that are occasionally useful, or were once considered useful but no longer are (register_globals), that it is best to disable if you don't need them. A website PHP installation needs to be more locked-down these days than used to be necessary in the "olden days", the early days of PHP.

The recommendations about how to write PHP code to prevent SQL injection and remote/local file inclusion are also still applicable. It will always be important to check incoming data carefully and use it only if it is valid. Invalid/malicious data received from the user must always be rejected or ignored.
« Last Edit: July 09, 2012, 04:37:10 AM by SteveW » Report to moderator   Logged
Pages: 1   Go Up
  Print  
 
Jump to:  

Yahoo! Search
Search the web Search this site
Mazeguy Smilies Powered by MySQL Powered by PHP Powered by SMF 1.1.16 | SMF © 2011, Simple Machines Valid XHTML 1.0! Valid CSS!