php security check list
- Full Path Disclosure
- Arbitrary File Upload
- Arbitrary File Delete
- Arbitrary File Download
- Local File Inclusion
- Remote File Inclusion
- Cookie Injection
- Header Injection
- SQL Injection
- XML Injection
- XXE Injection
- Email Injection
- HTML Injection
- xPath Injection
- Code Injection
- Command Injection
- Object Injection
- Cross Site Scripting
- Cross Site Request Forgery
- Broken Authentication and Session Management
来源：https://github.com/ismailtasdelen/php-security-check-list/edit/master/README.md
Comments:
Email questions, comments, and corrections to hi@smartisan.dev.
Submissions may appear publicly on this website, unless requested otherwise in your email.