PHP Security Checklist


PHP is a widely used scripting language primarily for web applications, although it has been known to be used to implement operating systems. The default configuration of PHP in most of its distributions is fairly secure, but there are some configuration options that can be checked in order to ensure the optimal security settings. In addition, it's worth checking your code as well. We'll give some helpful pointers that you can look at in your code, as well, to try and stop security problems before they happen.

php.ini configuration

These are some of the most important directives in the PHP configuration that you need to make sure you have the correct settings for. This list is only a summary and there are many hundreds of settings with which slight

Securing your code

You can take many strategies in order to try and secure your inputs using PHP - these are some of the most common ones that you can use within your code in order to try and prevent any strategies that may be used to get erroneous results (and ultimately, for hacking).