• We’re currently investigating an issue related to the forum theme and styling that is impacting page layout and visual formatting. The problem has been identified, and we are actively working on a resolution. There is no impact to user data or functionality, this is strictly a front-end display issue. We’ll post an update once the fix has been deployed. Thanks for your patience while we get this sorted.

Internet security books

Hey all. I am getting into web programming (primarily using PHP and MySQL) and am wondering what would be a good book that goes over security issues. I am a relatively decent coder, but I'm not as good in the area of security as I'd like to be. I've seen tons of books at the stores regarding this, but I don't want to get one that totally ends up being a lemon. Anyone have any good recommendations?
 
For this purpose, you don't need a book on Internet security, but rather books on secure coding. I highly recommend Viega and McGraw's Building Secure Software. The Secure Programming HOWTO is a good online reference on the topic.

Once you're familiar with secure programming in general, learn about secure programming on the web at the OWASP site. In particular, read the OWASP Guide to Building Secure Web Application, the Top Ten Web Security Flaw List, the Application Security FAQ, and the Testing Project documentation.
 
Back
Top