zend php 5 certification : filtering input

We should not trust any input from any source.The source could be a user, url or database value, any thing. Every input data must be filtered. unfiltered data makes your system vulnerable to attacks. php offers many input filtering functions. Let's a mock zend php 5 certification question regarding this.


Question : What is the best way to ensure the distinction between filtered / trusted and unfiltered / untrusted data?

Answer:

1. None of the above
2. Never trust any data from the user
3. Enable built-in security features such as magic_quotes_gpc and safe_mode
4. Always filter all incoming data
5. Use PHP 5's tainted mode
See the book OpenCart 1.4 Template Design Cookbook.
See the book Joomla Mobile Development Beginners Guide

List of my works:

Technical Support:

If you still face the technical problem, please get support of our highly skilled technical team: garazlab.com.


Wordpress Plugins:

1. Real-Time Health Data from Every Where:WP plugin to display real-time health data & increase sale by promoting user specific products according to health information: garazlab.com.
2. Woocommerce Stock Notification Builder:Sends desktop, mobile & email notifications with full customization.Build your own product notification system with it: garazlab.com.

Opencart Extensions:

1. Product Based Quantity Wise Shipping: Find it here.
2. OpenSSLCOMMERZ: integrate SSLCOMMERZ with opencart: Find it here.
3. Fine Search v.1.0 - Improves Opencart search feature to find relevant: Find it here.
4. Opensweetcaptcha - An easy way to generate attractive captcha for your system!: Find it here.
5. Custom Field Product - add unlimited custom fields to the product form: Find it here.
6. Formcaptcha - add captcha on the register page: Find it here.

My Books:

1. OpenCart 1.4 Template Design Cookbook.
2. Joomla Mobile Development Beginners Guide

strip_tags function for php

php provide a function named strip_tags(string str[,array allowable_tags]). we can strip html tags using this function. But this is function is not safe totally as the allowable_tags parameter will can those tags that will not be stripped off. So, we can totally rely on strip_tags for input filtering and output escaping. Let's the zend mock question for php 5 certification.

Question: When using a function such as strip_tags, are markup-based attacks still possible?

Answer:

1. No, HTML does not pose any security risks
2. Yes, even a

HTML tag is a security risk
3. Yes, attributes of allowed tags are ignored
strip_tags does not strip allowable tags.
4. No, strip_tags will prevent any markup-based attack
See the book OpenCart 1.4 Template Design Cookbook.
See the book Joomla Mobile Development Beginners Guide

List of my works:

Technical Support:

If you still face the technical problem, please get support of our highly skilled technical team: garazlab.com.


Wordpress Plugins:

1. Real-Time Health Data from Every Where:WP plugin to display real-time health data & increase sale by promoting user specific products according to health information: garazlab.com.
2. Woocommerce Stock Notification Builder:Sends desktop, mobile & email notifications with full customization.Build your own product notification system with it: garazlab.com.

Opencart Extensions:

1. Product Based Quantity Wise Shipping: Find it here.
2. OpenSSLCOMMERZ: integrate SSLCOMMERZ with opencart: Find it here.
3. Fine Search v.1.0 - Improves Opencart search feature to find relevant: Find it here.
4. Opensweetcaptcha - An easy way to generate attractive captcha for your system!: Find it here.
5. Custom Field Product - add unlimited custom fields to the product form: Find it here.
6. Formcaptcha - add captcha on the register page: Find it here.

My Books:

1. OpenCart 1.4 Template Design Cookbook.
2. Joomla Mobile Development Beginners Guide