PHP Freaks - Tutorials

This tutorial deals with the various security issues a PHP developer, or any person who writes web applications, might face. The tutorial is aimed towards beginners, but other people may find some of the information the tutorial contains useful as well. Topics such as SQL injections, cross-site scripting, remote file inclusion attacks and session security are covered. The tutorial also covers how

[koyhoge]

urlを渡してredirectさせる処理は、改行コードに注意しないと任意のjsを実行できる

[shoma]

HTTP Response Splittingの解説と対策。丁寧。