Email the Author

You can use this page to email Chris Cornutt about Securing PHP: Core Concepts.

Please include an email address so the author can respond to your query

This message will be sent to Chris Cornutt

This site is protected by reCAPTCHA and the Google  Privacy Policy and  Terms of Service apply.

About the Book

Securing PHP: Core Concepts acts as a guide to some of the most common security terms and provides some examples of them in every day PHP. Anything's easier to learn when you're all speaking the same language. This book starts you in the right direction, providing directions on the path to more secure development. Your users deserve a better level of privacy and security in the services they use.

This book looks at topics like:

  • Confidentiality, Integrity and Availability
  • Defense in Depth
  • Failing securely
  • Keeping security simple
  • Threat modeling
  • Attack patterns

...and many more. You'll learn about some of the essential foundations to writing secure software and see how they fit into the over all picture of the Secure Software Development Lifecycle.There's lots of books and articles out there about secure development and secure coding practices, but there's a distinct lack of PHP-targeted resources. The ones that are out there are years old and contain outdated information about things like register_globals or other deprecated features. 

I've been studying secure coding practices and general development for a few years now and I can safely say that this kind of information is in dire need in the PHP community. There's been some efforts in the past to inform developers how to defeat the typical OWASP Top 10 but application securing goes much beyond this. There's a whole ecosystem of terms and techniques around it that PHP developers need to know about.

This book introduces those concepts in an easy and accessible way and provides you with a good jumping off point towards future secure development.

Feedback for Securing PHP: Core Concepts

“I took tremendous value from Securing PHP, rather than a long list of examples of how to implement secure practices; I found this book forced me to really think about some of the decisions I was making in my own code. Writing secure code is more than just taking and implementing specific strategies and more about knowing and understanding all the ways in which your application may be vulnerable and addressing them in a manner that makes the most sense for your application. Even as I was reading, specific examples were coming to mind and giving me a list of things I needed to investigate. Securing PHP did a wonderful job of explaining some common security exploits. This is a must read for any PHP developer.” - Matt Frost

"I finally found the time to read 'Securing PHP: Core Concepts' and it has been a very good reading. I really enjoyed the writing style and the way the CIA approach was presented and the other security concerns. [...] Thanks for writing this book and I look forward to read your next 'Securing PHP: The Usual Suspects'." - Enrico Zimuel


About the Author

Chris Cornutt’s avatar Chris Cornutt

@enygma

Chris has been involved in the PHP community for over a decade. His contributions include curating the PHP news site PHPDeveloper.org, writing articles for his PHP-focused security site Websec.io and speaking at web technology conferences all around the world. He's also written for several major PHP publications and is a co-organizer for both the Dallas PHP user group and the Lone Star PHP Conference. He currently works as an application security developer for Pardot, a division of Salesforce.

You can find him online at http://blog.phpdeveloper.org

Logo white 96 67 2x

Publish Early, Publish Often

  • Path
  • There are many paths, but the one you're on right now on Leanpub is:
  • Securingphp-coreconcepts › Email Author › New
    • READERS
    • Newsletters
    • Weekly Sale
    • Monthly Sale
    • Store
    • Home
    • Redeem a Token
    • Search
    • Support
    • Leanpub FAQ
    • Leanpub Author FAQ
    • Search our Help Center
    • How to Contact Us
    • FRONTMATTER PODCAST
    • Featured Episode
    • Episode List
    • MEMBERSHIPS
    • Reader Memberships
    • Department Reader Memberships
    • Author Memberships
    • Your Membership
    • COMPANY
    • About
    • About Leanpub
    • Blog
    • Contact
    • Press
    • Essays
    • AI Services
    • Imagine a world...
    • Manifesto
    • More
    • Partner Program
    • Causes
    • Accessibility
    • AUTHORS
    • Write and Publish on Leanpub
    • Create a Book
    • Create a Bundle
    • Create a Course
    • Create a Track
    • Testimonials
    • Why Leanpub
    • Services
    • TranslateAI
    • TranslateWord
    • TranslateEPUB
    • PublishWord
    • Publish on Amazon
    • CourseAI
    • GlobalAuthor
    • Marketing Packages
    • IndexAI
    • Author Newsletter
    • The Leanpub Author Update
    • Author Support
    • Author Help Center
    • Leanpub Authors Forum
    • The Leanpub Manual
    • Supported Languages
    • The LFM Manual
    • Markua Manual
    • API Docs
    • Organizations
    • Learn More
    • Sign Up
    • LEGAL
    • Terms of Service
    • Copyright Policy
    • Privacy Policy
    • Refund Policy

*   *   *

Leanpub is copyright © 2010-2025 Ruboss Technology Corp.
All rights reserved.

This site is protected by reCAPTCHA
and the Google  Privacy Policy and  Terms of Service apply.

Leanpub requires cookies in order to provide you the best experience. Dismiss