How to start saving money
Lorem ipsum dolor sit amet, consectetur adipiscing elit lobortis arcu enim urna adipiscing praesent velit viverra sit semper lorem eu cursus vel hendrerit elementum morbi curabitur etiam nibh justo, lorem aliquet donec sed sit mi dignissim at ante massa mattis.
- Neque sodales ut etiam sit amet nisl purus non tellus orci ac auctor
- Adipiscing elit ut aliquam purus sit amet viverra suspendisse potent i
- Mauris commodo quis imperdiet massa tincidunt nunc pulvinar
- Adipiscing elit ut aliquam purus sit amet viverra suspendisse potenti
Why it is important to start saving
Vitae congue eu consequat ac felis placerat vestibulum lectus mauris ultrices cursus sit amet dictum sit amet justo donec enim diam porttitor lacus luctus accumsan tortor posuere praesent tristique magna sit amet purus gravida quis blandit turpis.
How much money should I save?
At risus viverra adipiscing at in tellus integer feugiat nisl pretium fusce id velit ut tortor sagittis orci a scelerisque purus semper eget at lectus urna duis convallis. porta nibh venenatis cras sed felis eget neque laoreet suspendisse interdum consectetur libero id faucibus nisl donec pretium vulputate sapien nec sagittis aliquam nunc lobortis mattis aliquam faucibus purus in.
- Neque sodales ut etiam sit amet nisl purus non tellus orci ac auctor dolor sit amet
- Adipiscing elit ut aliquam purus sit amet viverra suspendisse potenti
- Mauris commodo quis imperdiet massa tincidunt nunc pulvinar
- Adipiscing elit ut aliquam purus sit amet viverra suspendisse potenti
What percentege of my income should go to savings?
Nisi quis eleifend quam adipiscing vitae aliquet bibendum enim facilisis gravida neque. Velit euismod in pellentesque massa placerat volutpat lacus laoreet non curabitur gravida odio aenean sed adipiscing diam donec adipiscing tristique risus. amet est placerat in egestas erat imperdiet sed euismod nisi.
“Nisi quis eleifend quam adipiscing vitae aliquet bibendum enim facilisis gravida neque velit euismod in pellentesque massa placerat”
Do you have any comments? Share them with us on social media
Eget lorem dolor sed viverra ipsum nunc aliquet bibendum felis donec et odio pellentesque diam volutpat commodo sed egestas aliquam sem fringilla ut morbi tincidunt augue interdum velit euismod eu tincidunt tortor aliquam nulla facilisi aenean sed adipiscing diam donec adipiscing ut lectus arcu bibendum at varius vel pharetra nibh venenatis cras sed felis eget dolor cosnectur drolo.
PHP is a fantastic web development language if for no other reason than its low learning-curve to create dynamic, database-driven web sites quickly. For this reason and others, there has been an obvious influx of web developers ready to hire-on to create your company's next web application or site. Just like any other employee, contractor or otherwise, you want to be sure that the work being done isn't just quickly thrown together by a novice, but that there is consideration with regard to appropriate programming practices and security being thought of during development.Update: Read Part #2 here and Part #3 here.While it's impossible to give a black-and-white answer as to whether code you may be looking at is 'good' or 'bad', there are a few things to keep an eye out for to at least ask your developer appropriate questions about the work they are doing. Over the next few posts we will be detailing some helpful information that you can utilize to be an informed employer and make sure your money is being well spent.SQL Injection SecurityWhile you've no doubt heard the phrase 'SQL Injection' you may be unsure how this topic relates directly to PHP and what 'secure' versus 'insecure' programming practices may look like. The largest part of security-minded SQL programming is to always ensure the data being given to a database query has been scrutinized in some way so that 'malicious SQL' doesn't ever have access to your data in a way that you didn't intend. For instance, consider this example:$query = "SELECT firstName FROM users WHERE user = '" . $_GET['user'] . "'";mysql_query($query);The issue with this code is that whatever a user passes to their web browser for the 'user' value will be passed directly to your SQL database query. In the below example an attacker would be able to simply output a desired user's password to the screen rather than the expected first name.http://example.com/?user=' UNION SELECT password FROM users WHERE user = '1Questions to Ask Your Developer:
- What database framework do you utilize?
- How do you prevent SQL Injection?
- Do you validate all input (GET/POST) data?
- Do you use parameterized/placeholder SQL statements?
Related to point #1 above, database frameworks like PEAR::MDB2 are trusted and heavily reviewed. Generally speaking, there should be little need for a developer to use a 'custom' framework. Often times these 'custom' frameworks will be very lacking in basic security features. By sticking to a common database framework you will have extremely well-tested code by competent developers helping to ensure your database security.Another complement to your database security is to use a database firewall such as GreenSQL which will force all SQL queries to pass through a series of checks to verify that they aren't malicious. While this sort of software adds a layer of complexity to your deployment of applications it can be a huge safety-net for insecure code.Remember, your database contents aren't just your data, it's often the Publicly Identifiable Information (PII) of your customers or worse, their financial or healthcare data. Strong database security is an important first step for any business to consider when deciding to deploy a web application, be sure that your developers are well versed in the above methods of security before proceeding.
Looking for some help?
Expert Linux server consulting, security services, 24x7 monitoring and management is where we shine. Give us a call at 888-877-7118 or click here to request a proposal.
