June 27, 2015 by P.I.E. Staff

What is the potential impact of a given vulnerability? This isn't easy to answer.

June 16, 2015 by P.I.E. Staff

Although Cross-Site Scripting is one of the most common vulnerabilities on the Internet, it remains an unsolved problem (unlike SQL Injection).

May 26, 2015 by P.I.E. Staff

It's 2015; there's no excuse for writing code vulnerable to SQL Injection any more

May 14, 2015 by P.I.E. Staff

Alternative title: "Libmcrypt considered harmful." You should use libsodium if you can, or OpenSSL if you can't.

May 12, 2015 by P.I.E. Staff

We're maintaining a curated appsec reading list on Github -- check it out.

May 5, 2015 by P.I.E. Staff

A developer's short guide to encryption, authentication, and authenticated encryption with examples in PHP

April 21, 2015 by P.I.E. Staff

Login forms with a remember me checkbox are a common requirement. We explore the security of login forms and a robust model for remember me checkboxes.

April 17, 2015 by P.I.E. Staff

How to configure and use PHP's build-in session management system for maximum security.

April 17, 2015 by P.I.E. Staff

The official release of the PHAR auditing utility by Paragon Initiative.

April 15, 2015 by P.I.E. Staff

Secure code delivery is a hard problem; one which we aspire to solve.