What security issues should I consider when coding?

Question

I know that SQL Injection is one thing ... that the other ...

Answer 1

OWASP.org maintains a list. Start with the top ten OWASP .

Answer 2

Others said it, but ...

Essentially all security vulnerabilities come from data. If your program does not process any data, it can be safe. It can also be pretty useless :).

This leads to what I consider to be the basic concept for ensuring code security:

Do not trust your data. Ever.

, . (, , , Java #), , .

Answer 3

. ( , , , , - , . CRM: " , , Enterprise Manager Query Analyzer ?" )

Answer 4

10 . , . , , № 8, " ".

Answer 5

.

.

-R

Answer 6

, C, .

Answer 7

-, ...

JavaScript-. - - , -, JavaScript JavaScript, , ( /), javascript.

Answer 8

...

19

Answer 9

. /// " ? , ? , ". ; . , , . - , . .

, String , : " , ?" if-else , .

Answer 10

. , , . , dev. , . .:)

Answer 11

: 19

, , . - , .

Answer 12

Sending plain text passwords without first encrypting them is never a good idea.

Answer 13

Avoid sending plain text names.

Answer 14

how about checking user input? For example, you expect a 10-digit phone number, but you get "800OHNOES!"

Answer 15

In addition to the great OWASP tutorial, also check out SANS / CWE.