#php #security

owasp-esapi-php - Google Code

The purpose of the ESAPI is to provide a simple interface that provides all the security functions a developer is likely to need in a clear, consistent, and easy to use way. The ESAPI architecture is very simple, just a collection of classes that encapsulate the key security operations most applications need.

#clevermarks #dev #php #security #tools

owasp-esapi-php - Google Code

Ralph Schindler - Dynamic Assertions for Zend_Acl in ZF

Zend_Acl can now be used to make concise, dynamic and expressive ACL systems. The assertion system that is in place in Zend_Acl can be leveraged in ways never seen before out of the box. While the User/BlogPost example is on the simple side, you can use this article to start thinking about the different ways such a system can be leveraged in your own projects where dynamic assertions would simplify controller or model code that is already in place.

#security #acl #php #tools #clevermarks

Ralph Schindler - Dynamic Assertions for Zend_Acl in ZF

Graudit - Just Another Hacker

Graudit is a simple script and signature sets that allows you to find potential security flaws in source code using the GNU utility grep. It's comparable to other static analysis applications like RATS, SWAAT and flaw-finder while keeping the technical requirements to a minimum and being very flexible.

#php #security #tools #clevermarks

Graudit - Just Another Hacker