techPortal: Secure Programming with the Zend Framework
Using any framework tends to make us lazy. We know that our framework will escape data for us, bind query parameters and automatically protect from many more typical attacks. But are we secure or we at least know where protection ends?
IBuilding’s techPortal is publishing podcast from this year’s Dutch PHP Conference. In the latest one Stefan Esser talks about secure programming with Zend Framework.
The idea of that talk is to go through the classes of vulnerabilities or security problems that you usually need to take care of yourself and look at the Zend Framework to check what internal protection ZF offers and how they are used and what problems you still need to solve on your own.