<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>MDBitz Development Resources &#187; Security</title>
	<atom:link href="http://resources.mdbitz.com/categories/security/feed/" rel="self" type="application/rss+xml" />
	<link>http://resources.mdbitz.com</link>
	<description></description>
	<lastBuildDate>Mon, 22 Nov 2010 14:25:48 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.0.4</generator>
<xhtml:meta xmlns:xhtml="http://www.w3.org/1999/xhtml" name="robots" content="noindex" />
		<item>
		<title>New PHP Security and Authentication Framework</title>
		<link>http://resources.mdbitz.com/2010/02/new-php-security-and-authentication-framework/</link>
		<comments>http://resources.mdbitz.com/2010/02/new-php-security-and-authentication-framework/#comments</comments>
		<pubDate>Fri, 26 Feb 2010 01:30:37 +0000</pubDate>
		<dc:creator>MDBitz - Matthew Denton</dc:creator>
				<category><![CDATA[PHP]]></category>
		<category><![CDATA[Security]]></category>
		<category><![CDATA[Autentication Framework]]></category>
		<category><![CDATA[PHP Authentication]]></category>
		<category><![CDATA[PHP Security]]></category>
		<category><![CDATA[Secuirty Framework]]></category>

		<guid isPermaLink="false">http://resources.mdbitz.com/?p=1077</guid>
		<description><![CDATA[Introducing the MDBitz Security and Authentication Framework for PHP. I have always had an issue with any PHP Security or Authentication Framework or library that I have utilized in past projects. That is why I am developing my own comprehensive Security and Authentication Framework. I am building this framework from the ground up keeping all [...]]]></description>
		<wfw:commentRss>http://resources.mdbitz.com/2010/02/new-php-security-and-authentication-framework/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Securing your php websites on shared servers by use of the session_save_path configuration</title>
		<link>http://resources.mdbitz.com/2010/02/securing-your-php-websites-on-shared-servers-by-use-of-the-session_save_path-configuration/</link>
		<comments>http://resources.mdbitz.com/2010/02/securing-your-php-websites-on-shared-servers-by-use-of-the-session_save_path-configuration/#comments</comments>
		<pubDate>Thu, 18 Feb 2010 14:23:13 +0000</pubDate>
		<dc:creator>MDBitz - Matthew Denton</dc:creator>
				<category><![CDATA[PHP]]></category>
		<category><![CDATA[Security]]></category>
		<category><![CDATA[Tips & Tricks]]></category>
		<category><![CDATA[ini_set]]></category>
		<category><![CDATA[php.ini]]></category>
		<category><![CDATA[session.save_path]]></category>
		<category><![CDATA[session_save_path]]></category>
		<category><![CDATA[Shared Hosting Security]]></category>

		<guid isPermaLink="false">http://resources.mdbitz.com/?p=988</guid>
		<description><![CDATA[Beginner web developers may not be fully aware of the security vulnerabilities from shared hosting. Most shared hosting servers work by having a common php installation that uses the same php.ini configurations to run. What this means to the user is that all session information for all users are stored in a common directory on [...]]]></description>
		<wfw:commentRss>http://resources.mdbitz.com/2010/02/securing-your-php-websites-on-shared-servers-by-use-of-the-session_save_path-configuration/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Remote Code Execution</title>
		<link>http://resources.mdbitz.com/2009/08/remote-code-execution/</link>
		<comments>http://resources.mdbitz.com/2009/08/remote-code-execution/#comments</comments>
		<pubDate>Fri, 28 Aug 2009 19:41:45 +0000</pubDate>
		<dc:creator>MDBitz - Matthew Denton</dc:creator>
				<category><![CDATA[PHP]]></category>
		<category><![CDATA[Security]]></category>
		<category><![CDATA[Cross Site Scripting]]></category>
		<category><![CDATA[Remote Code Execution]]></category>
		<category><![CDATA[XSS]]></category>

		<guid isPermaLink="false">http://resources.mdbitz.com/?p=170</guid>
		<description><![CDATA[Remote Code Execution is a security vulnerability in where a malicious user manipulates input or a url to run code from a remote location.  Unlike Cross Site Scripting XSS where only the user is affected Remote Code Execution could run scripts that delete all files on your server. This security risk like most vulnerabilities comes [...]]]></description>
		<wfw:commentRss>http://resources.mdbitz.com/2009/08/remote-code-execution/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Session Fixation</title>
		<link>http://resources.mdbitz.com/2009/08/session-fixation/</link>
		<comments>http://resources.mdbitz.com/2009/08/session-fixation/#comments</comments>
		<pubDate>Thu, 06 Aug 2009 18:16:07 +0000</pubDate>
		<dc:creator>mdbitz</dc:creator>
				<category><![CDATA[PHP]]></category>
		<category><![CDATA[Security]]></category>
		<category><![CDATA[Session Fixation]]></category>
		<category><![CDATA[Session ID]]></category>
		<category><![CDATA[SID]]></category>

		<guid isPermaLink="false">http://mdbitz.com/resources/?p=18</guid>
		<description><![CDATA[Session Fixation is a security vulnerability where a user sets the Session Identifier (SID) of a user to a known value, allowing them to access your session. This would allow the malicious user to access the user&#8217;s private information. For Example: Jason has determined that his neighbor Joe&#8217;s bank site http://mybank.com is susceptible to a [...]]]></description>
		<wfw:commentRss>http://resources.mdbitz.com/2009/08/session-fixation/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>

