Home > slashdot > ‘Month of PHP Security’ Finds 60 Bugs

‘Month of PHP Security’ Finds 60 Bugs

June 4th, 2010 06:30 admin Leave a comment Go to comments

darthcamaro writes “More than 60 bugs were reported in PHP over the last 30 days by the Month of PHP Security project. Most of the flaws, however, are ones that developers themselves can protect against with proper coding practices, according to Andi Gutmans, CEO of commercial PHP vendor Zend. He argues that PHP security is a matter of setting expectations. In his view, PHP — like all development languages — is only as secure as the code developers write with it. ‘People should not expect PHP to be able to enforce security boundaries on a developer [who] has permissions to run custom PHP code,’ Gutmans said. ‘It’s an inherently flawed scenario — and it’s the wrong layer to protect in. People must rely on properly configured OS-level permissions for securing against untrusted developers.’ Gutmans also praised the MOPS effort for elevating the profile of PHP security throughout the community, and for responsibly alerting the PHP project first with the bugs they found.”

Source: ‘Month of PHP Security’ Finds 60 Bugs

Related Articles:

  1. Security Researcher Finds Hundreds of Browser Bugs
  2. Microsoft Fuzzing Botnet Finds 1,800 Office Bugs
  3. Researcher Claims Siemens Lied About Security Bugs
  4. Apple Seeds iOS 5.0.1 To Developers; Fixes Bugs Affecting Battery Life; iPad 2 Security Flaw, Adds Multitouch Gestures For iPad 1
  5. Apple Seeds iOS 5.0.1 To Developers; Fixes Bugs Affecting Battery Life; iPad 2 Security Flaw, Adds Multitouch Gestures For iPad 1
blog comments powered by Disqus
YOYOYOOYOYOYO