This site is the archived OWASP Foundation Wiki and is no longer accepting Account Requests.
To view the new OWASP Foundation website, please visit https://owasp.org
Difference between revisions of "Category:OWASP PHP Project"
(New layout, standarised to all programming languages. Previous pages is archive, linked on this page.) |
|||
Line 1: | Line 1: | ||
− | {| | + | [[Image:OWASP Inactive Banner.jpg|800px| link=https://www.owasp.org/index.php/OWASP_Project_Stages#tab=Inactive_Projects]] |
− | |- | + | <br/> |
− | + | ||
− | + | <div style="width:100%;border:0,margin:0;overflow: hidden;">[[File:OWASP_Java_Project_Header.png|link=]]</div> | |
− | |- | + | = About = |
− | | align=" | + | |
− | | align="right" | | + | {| style="padding: 0;margin:0;margin-top:10px;text-align:left;" |- |
+ | | valign="top" style="border-right: 1px dotted gray;padding-right:25px;" | | ||
+ | |||
+ | == About == | ||
+ | |||
+ | The OWASP PHP Project is the clearing house for all information related to building secure web applications and services based on PHP technologies. The focus of the project is on guidance for developers and application architects on using PHP and PHP frameworks. Moreover, we aim to provide security related guidance for system administrators managing PHP based applications and tools. | ||
+ | |||
+ | Community content is key to security information. The project depends on content from developers throughout the PHP ecosystem. | ||
+ | |||
+ | ==Purpose== | ||
+ | |||
+ | * Provide deep, rich guidance for PHP developers in using the security features of PHP and of PHP frameworks. | ||
+ | * Address security in relation to PHP and derived technologies. | ||
+ | * Guide system administrators in managing PHP related components and applications. | ||
+ | * Create guidance for use of OWASP components that are designed for use with PHP. | ||
+ | * Focus on information about working with and on OWASP tools built using PHP or other PHP technologies. | ||
+ | * Provide a stream of security related information, like vulnerabilities and security patches, related to the PHP universe. | ||
+ | * Build an ecosystem allowing to all actors interested to discuss, share and learn. | ||
+ | |||
+ | == Licensing == | ||
+ | |||
+ | OWASP PHP Project is free to use. It is licensed under the http://creativecommons.org/licenses/by-sa/3.0/ Creative Commons Attribution-ShareAlike 3.0 license], so you can copy, distribute and transmit the work, and you can adapt it, and use it commercially, but all provided that you attribute the work and if you alter, transform, or build upon this work, you may distribute the resulting work only under the same or similar license to this one. | ||
+ | |||
+ | | valign="top" style="padding-left:25px;width:200px;border-right: 1px dotted gray;padding-right:25px;" | | ||
+ | |||
+ | == Team == | ||
+ | |||
+ | Lead: None. | ||
+ | |||
+ | Curator: [https://www.owasp.org/index.php/User:imifos Tasha CARL] | ||
+ | |||
+ | <br/> | ||
+ | |||
+ | == Meta == | ||
+ | |||
+ | Last Update: 12/2015 | ||
+ | |||
+ | <br/> | ||
+ | |||
+ | == Other Resources == | ||
+ | |||
+ | [http://lists.owasp.org/mailman/listinfo/php-project Mailing List] | ||
+ | |||
+ | <br/> | ||
+ | |||
+ | == Related Projects == | ||
+ | |||
+ | * [[OWASP_Project|Main Project Repository]] | ||
+ | * [[OWASP_.NET_Project|OWASP .NET]] | ||
+ | * [[OWASP_Java_Project|OWASP Java and JVM]] | ||
+ | * [[OWASP_DevSec_Project|OWASP DevSec]] | ||
+ | * [[OWASP_Internet_of_Things_Project|OWASP IoT Security]] | ||
+ | * [[OWASP_Mobile_Security_Project|OWASP Mobile Security]] | ||
+ | |||
+ | | valign="top" style="padding-left:25px;width:200px;" | | ||
+ | |||
+ | ==Classifications== | ||
+ | |||
+ | {| width="200" cellpadding="2" | ||
+ | |- | ||
+ | | align="center" valign="top" width="50%" rowspan="2"| [[File:Owasp-incubator-trans-85.png|link=https://www.owasp.org/index.php/OWASP_Project_Stages#tab=Incubator_Projects]] | ||
+ | | align="center" valign="top" width="50%"| [[File:Owasp-builders-small.png|link=]] | ||
+ | |- | ||
+ | | align="center" valign="top" width="50%"| [[File:Owasp-defenders-small.png|link=]] | ||
+ | |- | ||
+ | | colspan="2" align="center" | [[File:Cc-button-y-sa-small.png|link=http://creativecommons.org/licenses/by-sa/3.0/]] | ||
+ | |- | ||
+ | | colspan="2" align="center" | [[File:Project_Type_Files_DOC.jpg|link=]] | ||
+ | |} | ||
+ | |||
+ | |} | ||
+ | |||
+ | |||
+ | |||
+ | |||
+ | |||
+ | |||
+ | |||
+ | |||
+ | = Project and related OWASP Resources = | ||
+ | |||
+ | {| style="padding:0; margin:0; margin-top:10px; text-align:left; width:100%;" |- | ||
+ | | valign="top" style="border-right: 1px dotted gray; padding-right:25px; width:30%; float:left;" | | ||
+ | |||
+ | == Mailing List == | ||
+ | |||
+ | [http://lists.owasp.org/mailman/listinfo/php-project OWASP PHP Project Mailing List] | ||
+ | |||
+ | | valign="top" style="padding-left:25px; width:30%; min-width:30%; border-right:1px dotted gray; padding-right:25px; float:left;" | | ||
+ | |||
+ | == Twitter Feed == | ||
+ | |||
+ | None. | ||
+ | |||
+ | |||
+ | | valign="top" style="padding-left:25px; width:30%; float:left;" | | ||
+ | |||
+ | == Code Repository == | ||
+ | |||
+ | None. | ||
|} | |} | ||
− | |||
− | |||
− | == | + | == Related Project Resources == |
− | [ | + | |
+ | [[OWASP_Project|Main Project Repository]] | ||
+ | |||
+ | [[OWASP_Java_Project|OWASP Java and JVM Project]] | ||
+ | |||
+ | [[OWASP_.NET_Project|OWASP .NET Project]] | ||
+ | |||
+ | [[OWASP_DevSec_Project|OWASP DevSec Project]] | ||
+ | |||
+ | [[OWASP_Internet_of_Things_Project|OWASP IoT Security Project]] | ||
+ | |||
+ | [[OWASP_Mobile_Security_Project|OWASP Mobile Security Project]] | ||
+ | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | + | ||
+ | =PHP Security Overview= | ||
It is not easy to produce a PHP application without security vulnerabilities. Most application security [[:Category:Vulnerability|vulnerabilities]] apply to PHP applications just like other environments. | It is not easy to produce a PHP application without security vulnerabilities. Most application security [[:Category:Vulnerability|vulnerabilities]] apply to PHP applications just like other environments. | ||
Line 41: | Line 144: | ||
: These articles cover topics specifically related to the PHP hosting environment. We discuss minimizing the attack surface, configuring error handlers, and performing hardening of PHP. | : These articles cover topics specifically related to the PHP hosting environment. We discuss minimizing the attack surface, configuring error handlers, and performing hardening of PHP. | ||
− | |||
− | |||
− | |||
− | |||
+ | |||
+ | |||
+ | |||
+ | |||
+ | |||
+ | = Project Pages = | ||
+ | |||
+ | == Tools Chain == | ||
+ | |||
+ | <TBD> | ||
+ | |||
+ | <br/> | ||
+ | |||
+ | <br/> | ||
+ | |||
+ | == Libraries == | ||
+ | |||
+ | <TBD> | ||
+ | |||
+ | <br/> | ||
+ | |||
+ | <br/> | ||
+ | |||
+ | == Documents == | ||
+ | |||
+ | [[PHP Top 5]] - OWASP PHP Top 5 | ||
+ | |||
+ | <TBD> | ||
+ | |||
+ | <br/> | ||
+ | |||
+ | <br/> | ||
+ | |||
+ | |||
+ | |||
+ | |||
+ | |||
+ | |||
+ | |||
+ | |||
+ | = Get involved = | ||
+ | |||
+ | To get involved join the mailing list: [http://lists.owasp.org/mailman/listinfo/owasp-php OWASP PHP Mailing List] | ||
+ | |||
+ | Please visit the [[Tutorial]] and remember to add the tag: <nowiki>[[Category:OWASP_PHP_Project]]</nowiki> at the end of articles so that they're properly categorised. | ||
+ | |||
+ | <TBD> | ||
+ | |||
+ | |||
+ | |||
+ | |||
+ | |||
+ | |||
+ | |||
+ | |||
+ | |||
+ | = Project Archives = | ||
+ | |||
+ | The previous version of this PHP Project home page is archived here: [[OWASP_PHP_Project_Archive_(03.2015)]] | ||
+ | |||
+ | <br/> | ||
+ | |||
+ | <hr/> | ||
+ | |||
+ | The category 'PHP' should not be employed. Please use the category '<nowiki>[[Category:OWASP_PHP_Project]]</nowiki>' instead. | ||
+ | |||
+ | <categorytree mode=pages style="display: block;">PHP</categorytree> | ||
+ | |||
+ | |||
+ | |||
+ | |||
+ | |||
+ | |||
+ | |||
+ | |||
+ | |||
+ | __NOTOC__ | ||
+ | <headertabs /> | ||
+ | |||
+ | <br/> | ||
+ | |||
+ | <!-- Wikimedia insert classified items list here --> | ||
+ | |||
+ | [[Category:OWASP_Builders]] | ||
+ | [[Category:OWASP_Defenders]] | ||
+ | [[Category:OWASP_Document]] | ||
[[Category:Technology]] | [[Category:Technology]] | ||
− | + | [[Category:OWASP_Project]] | |
− | [[Category:OWASP | + | [[Category:OWASP Document]] |
+ | [[Category:OWASP Download]] | ||
+ | [[Category:Language]] |
Revision as of 08:49, 2 December 2015
- About
- Project and related OWASP Resources
- PHP Security Overview
- Project Pages
- Get involved
- Project Archives
AboutThe OWASP PHP Project is the clearing house for all information related to building secure web applications and services based on PHP technologies. The focus of the project is on guidance for developers and application architects on using PHP and PHP frameworks. Moreover, we aim to provide security related guidance for system administrators managing PHP based applications and tools. Community content is key to security information. The project depends on content from developers throughout the PHP ecosystem. Purpose
LicensingOWASP PHP Project is free to use. It is licensed under the http://creativecommons.org/licenses/by-sa/3.0/ Creative Commons Attribution-ShareAlike 3.0 license], so you can copy, distribute and transmit the work, and you can adapt it, and use it commercially, but all provided that you attribute the work and if you alter, transform, or build upon this work, you may distribute the resulting work only under the same or similar license to this one. |
TeamLead: None. Curator: Tasha CARL
MetaLast Update: 12/2015
Other Resources
Related Projects |
Classifications
|
It is not easy to produce a PHP application without security vulnerabilities. Most application security vulnerabilities apply to PHP applications just like other environments.
The goals of this project are to provide information about building, configuring, deploying, operating, and maintaining secure PHP applications. We cover the following topics or pick a topic from the OWASP PHP Table of Contents
- PHP Security for Architects
- Provides information about the design and architectural considerations for a PHP web application. Common architectures such as MVC, Ajax, Web Services and PEAR / Zend Frameworks are discussed.
- PHP Security for Developers
- This section covers dangerous calls and common vulnerabilities associated with them, such as system() exec(), eval() and so on. This section will also cover standard security mechanisms available in the standard language, such as cryptography, logging, encryption, and error handling. Securing elements of an application, such as controllers, business logic, and persistence layers will be covered. We'll discuss handling request parameters, encoding, injection, and more.
- PHP Security for Deployers
- These articles cover topics specifically related to the PHP hosting environment. We discuss minimizing the attack surface, configuring error handlers, and performing hardening of PHP.
To get involved join the mailing list: OWASP PHP Mailing List
Please visit the Tutorial and remember to add the tag: [[Category:OWASP_PHP_Project]] at the end of articles so that they're properly categorised.
<TBD>
The previous version of this PHP Project home page is archived here: OWASP_PHP_Project_Archive_(03.2015)
The category 'PHP' should not be employed. Please use the category '[[Category:OWASP_PHP_Project]]' instead.
This category currently contains no pages or media.