Comments for Joseph Keeler

Comment on PHP Security – Escape proof SQL injection in ORDER BY clause by Henry

Henry — Mon, 16 Nov 2009 17:53:21 +0000

Thank you for this. It really gave something to think about.

Comment on PHP Security – Escape proof SQL injection in ORDER BY clause by mol

mol — Fri, 17 Jul 2009 15:05:14 +0000

this is really interesting, especially the fact that people think a mysql_real_escape_string() is enough to protect them against any attack. The exploit isnt trivial though.

Comment on PHP Upload Security & The 1×1 jpeg Hack by Phillip Harrington

Phillip Harrington — Sat, 16 May 2009 01:42:59 +0000

I actually considered doing this – renaming, reprocessing the image and appending a new extension. I was not, however, aware of this attack – or of the fix. Thanks for this article! Keep it up! I’m enjoying very much the security and optimization focus of your first few entries. And as promised, I’m subscribing!

Comment on PHP Optimization – Where to start by Joseph Keeler » PHP Performance - Optimize, Eliminate or Scale

Joseph Keeler » PHP Performance - Optimize, Eliminate or Scale — Thu, 14 May 2009 22:07:09 +0000

[...] approaches you can take. First, find out where your system performance can best be improved – see PHP Optimization – Where to Start. Once you know where your biggest bottlenecks are, you can either optimize that code, eliminate [...]

Comment on PHP Optimization – Where to start by Adam Culp

Adam Culp — Tue, 12 May 2009 02:26:19 +0000

All very valid points. Thank. Perhaps you will write a “How To” later?