Written by anyone on March 1, 2009 – 11:38 am
With hackers, fraud, worms, and viruses website security is a must. Website security is more important than ever before. Over at Google’s blog you can find a post titled Best practices against hacking. Included in Google’s post are steps for blog, SQL, and webpage security.
Here is an outline of securities measures you should be taking on your website or blog
Website Security Tip 1 – Guarding attacks against SQL Injection. What is an
SQL Injection? An SQL injection is a malicious bit of code injected into a web application. It changes the behavior of your SQL database. It can change URL’s, passwords, and registrations. How can you avoid an SQL injection? Below are some SQL injection tips:
Add a layer between a form and the front end of your database. Example – add a PDO extension
Website Security Tip 2 – A new form stealing access to a webpage is call cross-site scripting. What is cross-site scripting. Just like above, malicious code is injected into your webpage versus the SQL database. If you are using an PHP form and easy way to fight against cross-site scripting is to strip the input. You can also encode data to avoid direct cross-site scripting. And again, you can also creating an addition layer between your data and the back end.
If you know of other ways to avoid cross-site scripting or SQL injection please share. Sharing website security should be a common practice.
Tweet This Post
Buzz This Post
Delicious This Post
Digg This Post
Stumble This Post
