Re: Paper of insecure in PHP... and doubt in SQL-Injection

[zeno <bugtraq () cgisecurity net>]

> Hi,
>
> I'm searching a good paper or collection of papers that describe
> problems of PHP with real examples and eploitations. Like
> SQL-Injection, danger funcionts, buffer overflow, ...

I have a large collection of web security documents collected at www.cgisecurity.com/lib.
It does provide a few php, and sql injection papers. As far as buffer overflow exploitation
in php, you can't.


- zeno () cgisecurity com