SECURITY
INTERMEDIATE
Stop Trusting `$_POST`
A deep dive into data sanitization. Why `mysqli_real_escape_string` isn't enough, and how to use Prepared Statements properly to prevent SQL Injection.
A deep dive into data sanitization. Why `mysqli_real_escape_string` isn't enough, and how to use Prepared Statements properly to prevent SQL Injection.
How to build safe login sessions from scratch. Covers regenerating session IDs, preventing fixation, and ensuring cookies are set correctly.
Understand how to properly hash and salt passwords in PHP. Avoid common mistakes and use native functions to secure credentials.
Implement CSRF tokens correctly. Learn about double-submit cookies, synchronizer tokens, and where built‑in solutions fall short.