3 ms·

Thanks. And if you are given a big piece of source code. And no static/dynamic tools are allowed, only manual review. What should you look at first (PHP based s

by dlphii 10y ago

Thanks. And if you are given a big piece of source code. And no static/dynamic tools are allowed, only manual review. What should you look at first (PHP based site, authentication for users, online payment, very dynamic web-site).

paktek123 10y ago
I'd start with the basics - are any secrets/credentials visible in plain text? - how is input handled (escaping HTML etc) - how are headers and cookies being handled if any