This site is the archived OWASP Foundation Wiki and is no longer accepting Account Requests.
To view the new OWASP Foundation website, please visit https://owasp.org
Difference between revisions of "OWASP PHP Project Roadmap"
From OWASP
m |
|||
| (5 intermediate revisions by 4 users not shown) | |||
| Line 2: | Line 2: | ||
The OWASP PHP Project's overall goal is to... | The OWASP PHP Project's overall goal is to... | ||
| − | Produce materials that show PHP architects | + | Produce materials that show PHP developers, application architects, and |
| − | + | systems administrators how to deal with most common application security | |
| − | problems throughout the lifecycle. | + | problems throughout the complete lifecycle of the application. |
In the near term, we are focused on the following tactical goals: | In the near term, we are focused on the following tactical goals: | ||
| + | # Implementing Security using Best Practices (Non Framework Based Applications) | ||
# Provide examples of how to prevent Cross Site Scripting attacks in popular web frameworks | # Provide examples of how to prevent Cross Site Scripting attacks in popular web frameworks | ||
# Provide examples of how to prevent SQL Injection in popular data access frameworks | # Provide examples of how to prevent SQL Injection in popular data access frameworks | ||
| + | # Provide examples of how to prevent Cross Site Scripting attacks in popular AJAX frameworks | ||
# Provide examples of how to prevent LDAP injection in PHP | # Provide examples of how to prevent LDAP injection in PHP | ||
| − | # Secure configuration guides | + | # Secure configuration guides |
==Current Tasks== | ==Current Tasks== | ||
| Line 20: | Line 22: | ||
==Ideas== | ==Ideas== | ||
| − | Please submit your ideas for the OWASP PHP Project | + | Please submit your ideas for the OWASP PHP Project [[OWASP PHP Project Proposals]] (''you can sign your ideas by adding four tilde characters like this <nowiki>~~~~</nowiki>''). |
| − | + | [[Category:PHP]] | |
| − | |||
| − | [[Category: | ||
Latest revision as of 11:02, 21 January 2016
Goals
The OWASP PHP Project's overall goal is to...
Produce materials that show PHP developers, application architects, and systems administrators how to deal with most common application security problems throughout the complete lifecycle of the application.
In the near term, we are focused on the following tactical goals:
- Implementing Security using Best Practices (Non Framework Based Applications)
- Provide examples of how to prevent Cross Site Scripting attacks in popular web frameworks
- Provide examples of how to prevent SQL Injection in popular data access frameworks
- Provide examples of how to prevent Cross Site Scripting attacks in popular AJAX frameworks
- Provide examples of how to prevent LDAP injection in PHP
- Secure configuration guides
Current Tasks
- Call for volunteers - Join the mailing list, read the Tutorial and get started!
- Refine this roadmap in the discussion.
Ideas
Please submit your ideas for the OWASP PHP Project OWASP PHP Project Proposals (you can sign your ideas by adding four tilde characters like this ~~~~).
