Received: from bixbyite.sge.net ([10.18.9.1]) by facs.gov.au (Lotus SMTP MTA v4.6.7 (934.1 12-30-1999)) with SMTP id CA256AF0.001A34E5; Thu, 25 Oct 2001 14:46:14 +1000 Received: from kulanite.sge.net (kulanite2.sge.net [10.1.2.22]) by bixbyite.sge.net (Postfix) with ESMTP id 939C4A6405 for ; Thu, 25 Oct 2001 14:43:51 +1000 (EST) Received: from thorium2.sge.net (thorium2.sge.net [10.1.2.36]) by kulanite.sge.net (Postfix) with SMTP id BA2D23B10F for ; Thu, 25 Oct 2001 14:43:51 +1000 (EST) Received: FROM cascade.sge.net BY thorium2.sge.net ; Thu Oct 25 14:43:51 2001 +1000 Received: by cascade.sge.net (Postfix, from userid 5) id 8D67442948; Thu, 25 Oct 2001 14:46:14 +1000 (EST) Received: from nodnsquery(152.91.14.25) by cascade.sge.net via csmap (V6.0) id srcAAASPaq7w; Thu, 25 Oct 01 14:46:13 +1000 Received: from postgresql.org (webmail.postgresql.org [216.126.85.28]) by aventurine.sge.net (8.9.3/8.9.3) with ESMTP id OAA58766 for ; Thu, 25 Oct 2001 14:43:39 +1000 (EST) Received: from postgresql.org (webmail.postgresql.org [216.126.85.28]) by postgresql.org (8.11.3/8.11.4) with SMTP id f9P4EwP59021; Thu, 25 Oct 2001 00:15:02 -0400 (EDT) (envelope-from pgsql-php-owner+M637@postgresql.org) Received: from mail.fiber.net (mail.fiber.net [216.83.130.4]) by postgresql.org (8.11.3/8.11.4) with ESMTP id f9P44DP56584 for ; Thu, 25 Oct 2001 00:04:13 -0400 (EDT) (envelope-from phpPgAdmin@acucore.com) Received: from danwilson (bbudnick.employees.fiber.net [216.83.131.7]) by mail.fiber.net (8.11.3/8.11.3) with SMTP id f9P44B420746; Wed, 24 Oct 2001 22:04:11 -0600 (MDT) Message-ID: <006101c15d09$e6ec01c0$078353d8@danwilson> From: "Dan Wilson" To: , "Mo Holkar" References: <5.1.0.14.2.20011024175229.04dafea0@pop.ntlworld.com> Subject: Re: [PHP] Security Date: Wed, 24 Oct 2001 22:02:43 -0600 MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 5.50.4522.1200 X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4522.1200 Precedence: bulk Sender: pgsql-php-owner@postgresql.org Here are some general security links, but nothing specific to pgsql/php. Web Perversion "Hacking" Demo (Interesting!) http://www.sanctuminc.com/demo/hacking_demo_v1200.html Best Practices for Secure Web Development (PDF) http://members.home.net/razvan.peteanu/best_prac_for_sec_dev4.pdf "How I Hacked PacketStorm" (about SQL injection) http://www.wiretrip.net/rfp/p/doc.asp?id=42&iface=2 -Dan : Hi all, : : Can anyone recommend a good book or online source discussing security : issues in pgsql/php? : : Thanks, : : Mo ---------------------------(end of broadcast)--------------------------- TIP 3: if posting/reading through Usenet, please send an appropriate subscribe-nomail command to majordomo@postgresql.org so that your message can get through to the mailing list cleanly