Formed in 2009, the Archive Team (not to be confused with the archive.org Archive-It Team) is a rogue archivist collective dedicated to saving copies of rapidly dying or deleted websites for the sake of history and digital heritage. The group is 100% composed of volunteers and interested parties, and has expanded into a large amount of related projects for saving online and digital history.
PHP Security Check List [ EN ]
PHP: Hypertext Preprocessor is a web-based, server-side, multi-use, general-purpose, scripting and programming language that can be embedded in HTML. The PHP development, which was first created by Rasmus Lerdorf in 1995, is now being run by the PHP community.
The PHP programming language is still used by a large developer. It is the most known backend programming language. In PHP web applications, I prepared a list called "php security check list" which security researchers should know.
- Full Path Disclosure
- Arbitrary File Upload
- Arbitrary File Delete
- Arbitrary File Download
- Local File Inclusion
- Remote File Inclusion
- Cookie Injection
- Session hijacking
- Header Injection
- SQL Injection
- XML Injection
- XXE Injection
- Email Injection
- HTML Injection
- xPath Injection
- Code Injection
- Command Injection
- Object Injection
- Cross Site Scripting
- Cross Site Request Forgery
- Broken Authentication and Session Management
- Session Hijacking Attack
