PHP - Güvenlik ile ilgili kaynaklar

[jockeя]

+ Yabancı
++ Genel Siteler

Main Page - OWASP (http://www.owasp.org/) (The Open Web Application Security Project )
Home - Web Application Security Consortium (http://www.webappsec.org/) ( Web Application Security Consortium )
PHP Security Consortium (http://www.phpsec.org/) ( PHP Security Consortium)
Website Security, and Web Application Security News (http://www.cgisecurity.com/)
SQLSecurity.com > Home (http://www.sqlsecurity.com/) ( SQL Security )
Hardened-PHP Project - PHP Security - Home (http://www.hardened-php.net/)
PHP: sqrt - Manual (http://www.php.net/security) ( PHP security manual )
PHPAdvisory.com - PHP Information Source (http://www.phpadvisory.com/)

+++ Konulara göre makaleler
http://www.spidynamics.com/whitepape...LInjection.pdf (http://www.spidynamics.com/whitepape...LInjection.pdf)
http://www.ngssoftware.com/papers/ad..._injection.pdf (http://www.ngssoftware.com/papers/ad..._injection.pdf)
http://www.acros.si/papers/session_fixation.pdf (http://www.acros.si/papers/session_fixation.pdf) ( Session Fixation )
Chris Shiflett: Security Corner: Session Hijacking (http://shiflett.org/articles/security-corner-aug2004) ( Session Hijacking )
Chris Shiflett: Security Corner: File Uploads (http://shiflett.org/articles/security-corner-oct2004) ( File uploads )
Cgisecurity.com: Cross Site Scripting (XSS) questions and answers (http://www.cgisecurity.com/articles/xss-faq.shtml) ( XSS )
XSS (Cross Site Scripting) Cheat Sheet (http://ha.ckers.org/xss.html) ( XSS F.A.Q )
PHP Top 5 - OWASP (http://www.owasp.org/index.php/PHP_Top_5) ( En çok karşılaşılan 5 güvenlik sorunu )
Zend Technologies - Articles - Coding PHP with register_globals Off (http://www.zend.com/zend/art/art-sweat4.php) ( Register_globals )
http://www.technicalinfo.net/papers/...edAttacks.html (http://www.technicalinfo.net/papers/...edAttacks.html) ( URL encoded attacks )
http://www.cgisecurity.com/lib/Threa...ermeasures.pdf (http://www.cgisecurity.com/lib/Threa...ermeasures.pdf) ( Improving web app. security )
Paper -- Cross Site Scripting -- TechnicalInfo.net (http://www.technicalinfo.net/papers/CSS.html) ( XSS )
XSS Prevention - Bitflux Blog Wiki (http://blog.bitflux.ch/wiki/XSS_Prevention) ( XSS prevention )

++++ bloglar
PHP Security Blog (http://blog.php-security.org/)
Chris Shiflett: PHP and Web Application Security (http://www.shiflett.org/)
iBlog - Ilia Alshanetsky (http://www.ilia.ws/)
cat slave diary (http://www.greebo.net/)