Secure coding

A Guide to XML File Structure & External Entity (XXE) Attacks

Modern forms of markup languages such as HTML, XML and XHTML are mostly used in designing web pages. XML, which stands for Extensible Markup Language, define

Top 10 Questions to Ask Developers About Customer Data Security

1. What security features and controls are built into your product? Every software product should include the following aspects: Basic security measure

PHP Lab: Review the code and spot the vulnerability

Introduction and background An application has been developed in PHP, and the source code of the login page is given for source code review to ensure that no

PHP Lab: Analyze the code and spot the vulnerability

Introduction and background: A penetration test has been conducted on the following URL, and a SQL Injection vulnerability was identified. http://192.168.56.

PHP lab: PHP double submit problem.

If a user refreshes a page after submitting a form, he may accidentally post the content again resulting in duplicate submission, thus causing undesired re

PHP lab: File upload vulnerabilities:

Many websites require file upload functionality for their users. Social networking websites, such as Facebook and Twitter allow their users to upload profile

PHP lab: File inclusion attacks

File inclusion is one of the popular yet old vulnerabilities that are often seen in websites. [pkadzone zone="main_top"] PHP websites that make use

PHP Lab: Exploiting SQL Injection

Identifying SQL Injection vulnerabilities The first step in exploiting a SQL injection is to identify the vulnerability. This first section of this lab walks

PHP Lab: Prevent exposure of configuration/backup files from web root.

Introduction and background A developer has created a web application in PHP, and the application makes use of configuration files from the config folder of

SonarQube: A Hidden Gem

SonarQube is an open source quality management software that analyzes and measures the technical quality of project portfolio to a method which essentially m