The Web Dev Zone is brought to you in partnership with Mendix. Discover how IT departments looking for ways to keep up with demand for business apps has caused a new breed of developers to surface - the Rapid Application Developer.
Below are the slides from the presentation I gave
on SQL injection at last year's OWASP Poland Chapter
meeting. The materials teach how to use prepared statements, how to
escape and write secure stored procedures. Many PHP projects are covered
, Zend Framework
Multiple gotchas and caveats are included. I discuss why escaping is
usually the wrong choice, which practices to avoid or follow and how
stored procedures sometimes offer no protection at all.
I tried to make this as complete as possible, so a PHP developer could
learn how to protect his applications no matter what framework /
database he uses.
The Web Dev Zone is brought to you in partnership with Mendix. Learn more about The Essentials of Digital Innovation and how it needs to be at the heart of every organization.
Published at DZone with permission of
, DZone MVB
Opinions expressed by DZone contributors are their own.