Workshop WebSecurity

@DyanGalih

2017 - UTY

Disclaimer

• DWYOR
• Don't Try This At Home
• Education Purpose Only

Web Security

• Communication Security
• Authentication
• Authorization
• Input Validation
• File and Resources
• Error Handling
• Data Protection

Input Validation

• Validation Method
  • Server Side, It Must
  • Client Side Optional
• Injection
  • Sql Injection
  • XSS injection

Sql Injection

XSS Injection

Resource

• OWASP
• GitHub
• W3schools
• php.net

Terimakasih