News for hackers. Stuff that matters.
Re:Ask HN: First steps to check the security of PHP web-appl... by paktek123 on Thursday November 24, 2016 @03:28PM (#13032566)
I'd start with the basics

- are any secrets/credentials visible in plain text?

- how is input handled (escaping HTML etc)

- how are headers and cookies being handled if any

There are no comments on this comment yet.