[JackOfAllTrades]

Some good links on securing your website:

Open Web Application Security Project (OWASP)
Chris Shiflett's Blog
Google Code University
Writing Secure PHP
OWASP's PHP Security Cheat Sheet

[c1ph3r]

Already know about first three..
4th one is new to me.

Thanks for Share

[pandayai]

Thank you,to share file

[king1212]

thank you for sharing

[JacksonD]

c1ph3r, on 11 July 2011 - 01:32 AM, said:

Already know about first three..
4th one is new to me.

Thanks for Share

thanks for the links, All are knew to me except the last one. For other people, those links are well worth a ty.

[JackOfAllTrades]

An excellent blog post on the state of password hashing today. The use of GPUs in cracking passwords has made breaking hashes to get user passwords too easy. Highlights/important take-aways:

Quote

Make sure all your passwords are 12 characters or more, ideally a lot more. I recommend adopting pass phrases, which are not only a lot easier to remember than passwords (if not type) but also ridiculously secure against brute forcing purely due to their length.

Quote

Use bcrypt or PBKDF2 exclusively to hash anything you need to be secure. These new hashes were specifically designed to be difficult to implement on GPUs. Do not use any other form of hash. Almost every other popular hashing scheme is vulnerable to brute forcing by arrays of commodity GPUs, which only get faster and more parallel and easier to program for every year.

PHP developers should look to the phpass library for a bcrypt implementation.

[abcdxyz]

hi good sharing dude

[CitooZz]

thanks dude for sharing

[James_Smith]

Hi JackOfAllTrades,

Great share as today there is a more chances of hacking our website by hackers any time so for preventing to hack our business website - we have to make it secure. And these are the most important resources to learn new things and ideas about how to secure your website?

[JackOfAllTrades]

Update: Now recommending the use of password_compat for PHP password hashing as it's forward-compatible with the upcoming PHP 5.5 release. Here is a video on password hashing by the author of this library:

Password Hashing in PHP

[JackOfAllTrades]

More links:

Survive the Deep End: PHP Security
PHP Password Hashing - A Dead Simple Implementation

[Hemanthmalli]

Thanks for sharing the links with us its very useful to everyone.

[futureideasnsol]

Thanks for sharing!

[ramarjun]

thank you for share this valuable information