Wiki articles tagged with "security"

To extend the functionality of you web application relative to your requirements you are supposed to use existing yii core libraries or use external libraries. There are some steps to ensure security, uniqueness, modularity, performance and to avoid rework in future.

Step 01: Have a Strategy

• Is my extension just for fun/demonstration purposes or for everyday use in the real world? -...

Suppose a hacker has an account of your website He could set the PHPSESSID to empty After of that He login in your system The PHPSESSID remains blank and user has already logged with this session

When talking about cookie-base login the Yii guide indicates the following:

In this article I will show you how to slightly increase application security, by exploiting the fact that Yii implements the Front Controller Pattern.