Top PHP security blunders
Whilst looking through my archive of technology blog posts, I came across this article on SitePoint: Top 7 PHP Security Blunders. Although written in 2005, most of the points made…
Apache access control by IP address
If you're running a PHP application, particularly a web service, you may want to restrict access based on the client's IP address. Whilst this is not a fool-proof method of…
WordPress 3.0.4 released
WordPress 3.0.4 has been released today and contains an important security update. Everyone is strongly advised to upgrade as soon as possible. More information about the vulnerability can be found…
Special characters in passwords
Recently I moved our website at work from one hosting provider to another. As we have several instances of the site (testing, demo, live etc.), each with their own separate…
Hide PHP version from server headers
If you've ever examined the headers produced by a server running PHP, you may have seen this amongst them: X-Powered-By: PHP/5.2.12 This little piece of information tells the world that…