PHP Manual

• Introduction
• General considerations
• Possible attacks
• Case 1: only public files served
• Case 2: using cgi.force_redirect
• Case 3: setting doc_root or user_dir
• Case 4: PHP parser outside of web tree
• Installed as an Apache module
• Null bytes related issues
• Designing Databases
• Connecting to Database
• Encrypted Storage Model
• SQL Injection
• Error Reporting
• Using Register Globals
• User Submitted Data
• What are Magic Quotes
• Why did we use Magic Quotes
• Why not to use Magic Quotes
• Disabling Magic Quotes
• Hiding PHP
• Keeping Current