安全 · php开发笔记

[网站如何保护用户的密码](%E7%BD%91%E7%AB%99%E5%A6%82%E4%BD%95%E4%BF%9D%E6%8A%A4%E7%94%A8%E6%88%B7%E7%9A%84%E5%AF%86%E7%A0%81.md) [关于web项目sessionID欺骗的问题](%E5%85%B3%E4%BA%8Eweb%E9%A1%B9%E7%9B%AEsessionID%E6%AC%BA%E9%AA%97%E7%9A%84%E9%97%AE%E9%A2%98.md) [php的sessionid可以伪造，不要用来做防刷新处理了](php%E7%9A%84sessionid%E5%8F%AF%E4%BB%A5%E4%BC%AA%E9%80%A0%EF%BC%8C%E4%B8%8D%E8%A6%81%E7%94%A8%E6%9D%A5%E5%81%9A%E9%98%B2%E5%88%B7%E6%96%B0%E5%A4%84%E7%90%86%E4%BA%86.md) [DVWA-Weak Session IDs (弱会话)漏洞利用方式](DVWA-WeakSessionIDs%E5%BC%B1%E4%BC%9A%E8%AF%9D%E6%BC%8F%E6%B4%9E%E5%88%A9%E7%94%A8%E6%96%B9%E5%BC%8F.md) [保证接口数据安全的10种方案](%E4%BF%9D%E8%AF%81%E6%8E%A5%E5%8F%A3%E6%95%B0%E6%8D%AE%E5%AE%89%E5%85%A8%E7%9A%8410%E7%A7%8D%E6%96%B9%E6%A1%88.md) [cookie和session的窃取](cookie%E5%92%8Csession%E7%9A%84%E7%AA%83%E5%8F%96.md) [万能密码漏洞](%E4%B8%87%E8%83%BD%E5%AF%86%E7%A0%81%E6%BC%8F%E6%B4%9E.md) [黑客如何快速查找网站后台地址方法整理](%E9%BB%91%E5%AE%A2%E5%A6%82%E4%BD%95%E5%BF%AB%E9%80%9F%E6%9F%A5%E6%89%BE%E7%BD%91%E7%AB%99%E5%90%8E%E5%8F%B0%E5%9C%B0%E5%9D%80%E6%96%B9%E6%B3%95%E6%95%B4%E7%90%86.md) [网站后台万能密码/10大常用弱口令](%E7%BD%91%E7%AB%99%E5%90%8E%E5%8F%B0%E4%B8%87%E8%83%BD%E5%AF%86%E7%A0%81-10%E5%A4%A7%E5%B8%B8%E7%94%A8%E5%BC%B1%E5%8F%A3%E4%BB%A4.md) [万能密码漏洞02](%E4%B8%87%E8%83%BD%E5%AF%86%E7%A0%81%E6%BC%8F%E6%B4%9E02.md) [大多数网站后台管理的几个常见的安全问题注意防范](%E5%A4%A7%E5%A4%9A%E6%95%B0%E7%BD%91%E7%AB%99%E5%90%8E%E5%8F%B0%E7%AE%A1%E7%90%86%E7%9A%84%E5%87%A0%E4%B8%AA%E5%B8%B8%E8%A7%81%E7%9A%84%E5%AE%89%E5%85%A8%E9%97%AE%E9%A2%98%E6%B3%A8%E6%84%8F%E9%98%B2%E8%8C%83.md) [token可以被窃取吗_盗取token](token%E5%8F%AF%E4%BB%A5%E8%A2%AB%E7%AA%83%E5%8F%96%E5%90%97_%E7%9B%97%E5%8F%96token.md) [token被劫持[token被劫持如何保证接口安全性]](token%E8%A2%AB%E5%8A%AB%E6%8C%81%5Btoken%E8%A2%AB%E5%8A%AB%E6%8C%81%E5%A6%82%E4%BD%95%E4%BF%9D%E8%AF%81%E6%8E%A5%E5%8F%A3%E5%AE%89%E5%85%A8%E6%80%A7%5D.md) [PHP给后台管理系统加安全防护机制的一些方案](PHP%E7%BB%99%E5%90%8E%E5%8F%B0%E7%AE%A1%E7%90%86%E7%B3%BB%E7%BB%9F%E5%8A%A0%E5%AE%89%E5%85%A8%E9%98%B2%E6%8A%A4%E6%9C%BA%E5%88%B6%E7%9A%84%E4%B8%80%E4%BA%9B%E6%96%B9%E6%A1%88.md) [php - 重新生成 session ID](php-%E9%87%8D%E6%96%B0%E7%94%9F%E6%88%90sessionID.md) [隐藏响应中的server和X-Powered-By](%E9%9A%90%E8%97%8F%E5%93%8D%E5%BA%94%E4%B8%AD%E7%9A%84server%E5%92%8CX-Powered-By.md) [PHP会话控制之如何正确设置session_name](PHP%E4%BC%9A%E8%AF%9D%E6%8E%A7%E5%88%B6%E4%B9%8B%E5%A6%82%E4%BD%95%E6%AD%A3%E7%A1%AE%E8%AE%BE%E7%BD%AEsession_name.md) [Session攻击001](Session%E6%94%BB%E5%87%BB001.md) [PHP防SQL注入代码,PHP 预防CSRF、XSS、SQL注入攻击](%E9%98%B2SQL%E6%B3%A8%E5%85%A5%E5%B8%B8%E7%94%A8%E6%96%B9%E6%B3%95.md) [php25个安全实践](php25%E4%B8%AA%E5%AE%89%E5%85%A8%E5%AE%9E%E8%B7%B5.md) [php架构师系统管理员必须知道的PHP安全实践](php%E6%9E%B6%E6%9E%84%E5%B8%88%E7%B3%BB%E7%BB%9F%E7%AE%A1%E7%90%86%E5%91%98%E5%BF%85%E9%A1%BB%E7%9F%A5%E9%81%93%E7%9A%84PHP%E5%AE%89%E5%85%A8%E5%AE%9E%E8%B7%B5.md)