PHP Manual Security expect:// Introduction Security IntroductionGeneral considerationsInstalled as CGI binaryPossible attacksCase 1: only public files servedCase 2: using cgi.force_redirectCase 3: setting doc_root or user_dirCase 4: PHP parser outside of web treeInstalled as an Apache moduleFilesystem SecurityNull bytes related issuesDatabase SecurityDesigning DatabasesConnecting to DatabaseEncrypted Storage ModelSQL InjectionError ReportingUsing Register GlobalsUser Submitted DataMagic QuotesWhat are Magic QuotesWhy did we use Magic QuotesWhy not to use Magic QuotesDisabling Magic QuotesHiding PHPKeeping Current