What are PHP extensions?
PHP extensions are compiled libraries that enable certain functions that you can use during your script.
How do i install a PHP extension?
Download the application extension file to copy to your php extensions directory. If you can not locate the extensions directory...
Hey i am looking t create a new php framework this is to provide simple, reusable, and secure code. Right now i have installed a couple composer packages and created some classes/interfaces and i am currently setup a custom made router. If anyone is interested in contributing email me at...
Actually i am right if you look at this post and look at the best answer it show which vars are a risk https://stackoverflow.com/questions/6474783/which-server-variables-are-safe. Before hating on my comment check your sources. Let me put it like this. The risk with X-Forwarded-For is that a...
You should not use this because $_SERVER['HTTP_X_FORWARDED_FOR'] or $_SERVER['HTTP_CLIENT_IP'] can be edited by the connecting user witch opens up a security risk. The best way to the IP address is $_SERVER['REMOTE_ADDR']. Anything that is a HTTP var can be edited by the user.
I would not use this for production use due to the fact that their is no Csrf validation and their is a Timing attack vulnerability. Plus their is no prepared statements going on so your script is vulnerable to SQL Injection. strip_tags, stripslashes, mysqli_real_escape_string is not enough. Md5...
Yea people who are inexperienced in PHP can post code and might tell other people it is okay to use that code in their project not taking any steps towards security. But that is why people are realease libs/frameworks so your site is good security wise. For example, Zend Framework is a good...