EDU Checkup

Site Scores:

Today’s Tip:

Always, always, always validate your form data before checking against the actual database. You should never trust the user, imagine every single person is trying to take advantage of your server. This means having a whitelist instead of a blacklist for content. This means sanitizing all data and casting it to the correct type for the database. It also means, most importantly turning off all public error reporting on production. If the user (or bot) finds an exploit, errors shown on the screen only give them more insight in to their next move.

Like what you see? Subscribe to the video blog through RSS, iTunes or sign up to receive email updates when new episodes are posted.

Tags: episode

This entry was posted on Friday, January 20th, 2012 at 3:37 pm and is filed under episode. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.