基于PHP的代码安全审计方法研究与实践

Research and Practice of Code Security Audit Method based on PHP

随着互联网的普及,internet在人们生活中的作用日益凸显。而PHP是web互联网时代的编程语言主力军之一。与此同时,编程人员的安全意识不足,代码逻辑不合理等原因造成了各种各样的安全问题。但因此产生的网络安全事件却并没有让软件开发人员的网络安全意识与软件开发能力齐头并进,保持同水平的增长。形成了“开发能力强,安全意识弱”的奇怪现象。本人就网络中基于PHP开发的CMS系统作为切入点,进行网络安全审计的思路分析与探讨,以便普及网络安全意识,促进网络安全意识与软件开发能力齐头并进。

With the popularity of the Internet,the role of Internet in people’s life is increasingly prominent,and PHP is one of the main forces of programming language in the era of Web Internet.At the same time,the lack of security awareness of programmers,unreasonable code complication and other reasons may cause a variety of security problems.However,the network security incidents caused by the above reason did not make the software developers’network security awareness and software development ability go hand in hand,maintaining the same level of growth,forming a strange phenomenon of“strong development ability and weak security awareness”.In this paper,the CMS system based on PHP in the network as the breakthrough point to analyze and discuss the ideas of network security audit,so as to popularize network security awareness and promote network security awareness and software development ability to go hand in hand.