PHP and SQL Security

An anonymous reader writes "PHP and SQL Security are being proven more weak every day. Uberhacker.Com is running a PHP and SQL security research project to raise awareness of secure scripting. The site hosts guides to secure PHP programming, forums, and scripting challenges to see who can create the most secure scripts."

Comments

Re: cutting off an arm

[sczimme]

Or would you blame the workman who cuts off his arm with the buzz saw's totally unprotected blade?

Yes, I would: he was obviously doing something with the saw that was inappropriate; what saw-oriented task [when done correctly] involves waving it at one's own arm?* The fact that the blade was unprotected is irrelevant since he should have known it was unprotected and therefore dangerous. All tools can be used stupidly, and oddly enough the results really can be the fault of the operator. It is also possible for fault to lie in more than one area.

Yes, I know the traditional definition of 'hacking' includes making $ITEM do something it was not intended to do, but there are limits.

* I'm guessing that 'buzz-saw' == 'circular saw'.