PHP Coding/Security Guidelines Checklist

[dianna]

n general…

a. I’m assuming here that the programmer is not also the server administrator, and that the server admin more or less knows how to configure LAMP correctly and securely by default

i. Of course, if necessary, a programmer can override most PHP settings in a custom php.ini file located in the web root

b. Use an MVC framework

i. I use CakePHP. The framework itself goes a long way to ensure fundamentally sound and secure coding practices.