phpsecurity issues

Revised SSL

This seems to be outdated and old, inaccurate. At least where I've tested it here.

code snippet color contrast is too weak

1

Color contrast for code snippets (white text on light grey background) is (far) too weak. The wcag "Contrast (Minimum" rule suggest a contrast ratio of at least 4.5:1 https://www.w3.org/TR/WCAG20/#visual-audio-contrast

jcaillot

Fix two typos in Input-Validation.rst

patrickmaynard

Update PHP-Security-Default-Vulnerabilities-Security-Omissions-And-Fr…

…aming-Programmers.rst

ericfortmeyer

Updated traversed directory.

Fixed a typo outlining the resultant directory when a dot-dot-dash is used.

shanept

Added allow_url_include. Added suggestion for preg_quote.

It seems a placeholder was left for the correct option to be replaced later, and never was addressed. So, _nudge_, I guess. I have also added a simple note about...

shanept

checkIntegerRange seems bad

Reading over: http://phpsecurity.readthedocs.org/en/latest/Input-Validation.html The example of checkIntegerRange seems bad, if you pass an array the is_string fails and is_int passes because of the explicit conversion. While this is safe, as...

reductor

Update XML-Injection.rst

I think this is what the text meant to be. Although, "XMl Entity Expansion is somewhat similar to XML Entity Expansion" does seem like it could be a recursion joke.

Bjwebb