Is there a guide for finding and fixing PHP exploits?


The reason I am asking is I would like to learn how to do this
help would be very much appreciated maybe even enough for TALKUPATION if it allows me.

Hehe, do you want to learn how to hack or something?

Yes in a way I just want to improve security

WHITE-HAT

this one talks about sql injections http://www.combined-minds.net/tutori..._SQL_Injection

this one talks about both cross site scripting attacks and sql injections.
http://templora.com/content/14

I've found 2 sites about PHP exploits:

http://www.phpit.net/article/php-sec...mple-exploits/
and
http://blog.php-security.org/

Not sure if this is what you wanted, but hope they help.

TP appreciated

Originally Posted by flann

this one talks about sql injections http://www.combined-minds.net/tutori..._SQL_Injection

this one talks about both cross site scripting attacks and sql injections.
http://templora.com/content/14

Templora is the best website ever! (For webmaster support).

I learned most of my security techniques by mistakes. I find if you want to do anything, you gotta encrypt it.

The best way would probably be to report them to Php.net and im sure if they can it would be fixed in the next update

I am not talking about the PHP source code I am talking about source code in a script dan.

well then its very simple... rewrite it securly use all the functions to clean moniter blah blah blha