Category Archives: PHP

04/11/2010
Comments

Printable PHP security checklist

Following someone’s suggestion, my PHP security checklist is now in a printable cheat sheet form. Download: phpsec_cheatsheet.pdf


04/03/2010
Comments

Introduction to PHP streams

Streams is a feature of PHP that was introduced in PHP 4.3 to unify the methods for working on files, sockets, and other similar resources. PHP 4.3 came out a long time ago, but many PHP developers never learned how … Continue reading


03/31/2010
Comments

Sandboxed Lua via PHP

I adapted Fran Rogers’s Lua MediaWiki extension into a library named Looah. It runs Lua code in a sandbox from PHP, which allows you to execute Lua code provided by users. Right now it supports limits on recursion depth, the … Continue reading


03/26/2010
Comments

VC6 Windows binaries for imagick 2.3.0

Here are Windows binaries for imagick 2.3.0 compiled with VC6 (you can find VC9 binaries at Mikko’s blog) against PHP 5.3.2 (API20090626). php_imagick.dll, NTS php_imagick.dll, TS Remember that you still need the appropriate ImageMagick DLL for imagick to work.


08/10/2009
Comments

Definitive PHP security checklist

There was a recent question about a PHP security checklist on a forum I frequent, and I’ve decided to write my own comprehensive checklist to fill the void. There’s something for everyone but the security expert. In fact, you might … Continue reading