Hack Security Pro.pdf - Index of

Here is the result that for example enables one to recover the connection login/password to the Mysql
database:
Security
To avoid this kind of attack, we can use the PHP function which will check that the file has been
uploaded using the POST method, as this prevents files on your server from being copied. Here
is the code using the function “move_uploaded_file()” enabling us to make our script is secure:
Include() Function
There are several functions that have to be used carefully when coding in PHP. Let us start with the
include() function, which is very often used by the hacker to have malicious code executed by the
HTTP server. The include() function can include another file's PHP code into a main PHP script.
The Hackademy DMP -112/209- SYSDREAM