SHA256
——
sha256 is generally available with PHP 4/5. Depending on what’s available you can use the mhash or hash fucntion. For example in PHP 4 here is how I do sha256:

function sha256($string)
{
return bin2hex(mhash(MHASH_SHA256,$string));
}

Also, if you need to store a password in the session… YOU DON’T, please pick up a new hobby and stop attempting to be a ‘programmer’!!!

SQL INJECTION
————-
And for SQL injection vulnerabilities, you can actually use the function mysql_real_escape_string… or if you are using a new version of PHP, there are actually classes with built-in escaping… who knew!

SAFE MODE
———
Don’t use it! Why? Read the manual: “Safe Mode is deprecated in PHP 5.3.0 and is removed in PHP 6.0.0.” Get a virtual server for your hosting account and you won’t have to worry about it.

A lot of the stuff in this post is generally useful, but if people are just learning this… they are a decade behind :(

This post was mentioned on Twitter by yousukezan: RT @tweetmeme Top 7 PHP Security Blunders | TuVinhSoft .,JSC http://bit.ly/3wkQzZ...