Code Review For Security
summary
Workshop walks through real PHP apps and shows exact failures not theory: template engines misused (example twig autoescape false leads to XSS; smarty is insecure by default unless explicit escaping), php views that extract raw POST to output, an authentication flow with weak session signature, inconsistent sanitize helpers and a timing-leak from multiquery checks, arbitrary file read via unsanitized filename, and a Cake utility that returns true from validateAuthKey plus a custom cipher using srand and a fixed IV in CBC making encryption effectively worthless.
AI-written summary · about
chapters (52)
- 0:00Intro
- 0:55Create New View
- 1:15Direct Path
- 1:30Twig View
- 2:00Template View
- 2:30Raw Data
- 3:00IP Address
- 3:30Generic Catch Handler
- 4:00No Magic
- 4:30Smarty
- 6:30Output
- 7:00PHPView
- 7:30Data
- 8:30Templates
- 9:00Intuition
- 11:00Encryption
- 12:00Secure Login
- 13:30Check Style
- 14:00AutoFixer
- 14:30Deny
- 15:00sanitized
- 15:30sanitize
- 16:30signature
- 17:00timing attack
- 18:30invalid username
- 19:00avoid the subtlety
- 19:30why bother
- 20:00not good
- 20:30blog post
- 24:30Crosssite scripting
- 25:00Leaks
- 25:30Ugly
- 27:00Upload
- 28:00Token File
- 29:00Get Reference
- 30:30Practice
- 34:00Hash Function
- 35:30Cipher Function
- 41:30Questions
- 43:00WASP
- 43:30Top 10 vulnerabilities
- 45:00Crosssite scripting vulnerabilities
- 45:30Prevention Cheat Sheet
- 46:30Essential PHP Security
- 49:00Automated Security Tools
- 51:30Audit
- 52:00Question of the Day
- 54:30Rails
- 55:00Magic
- 56:00WordPress
- 58:30Apple
- 59:30Git Repository
related talks
02h 14mWeb application security (Part 1)
01h 01mSecurity: From basic principles to PHP specifics
02h 18mWeb application security (Part 2)
44mFind security vulnerabilities through code review
55mWeb Application Security: Winning When The Odds Are Against You
35mPHP is evil (Defensive programming)
10mIntroduction to web security
01h 04mWeb Security And You