PHP is Evil - Defensive Programming
Explore the dark side of PHP in this 35-minute conference talk from PHP UK Conference 2013. Delve into the language's troubled upbringing and potential security pitfalls. Learn about PHP's evolution, best development practices, and security considerations when working with C libraries. Discover unexpected function behaviors, browser quirks, and LAMP stack security configurations. Identify common mistakes, security antipatterns, and fallacies. Gain insights on code review techniques and developing a security-focused mindset. Cover topics such as string escaping, input cleaning, and securing PHP applications. Examine a real-world case study demonstrating target discovery and exploitation. Walk away with practical knowledge on defensive programming and strategies to mitigate PHP's potential vulnerabilities.