Dreaweaver security?
 

I need to build a small web app for a small company and they are totaly over the top about security - You would think they were Bank Of America and not a chain of bloody hair salons....

Anyone have a POV on the securtity that is provided by the functions that are built into apps made with DW?

Thanks

use notepad and feel safe sleeping

They are not paying me enough to start down that road - This out of my comfort zone to be honest - Its a lot different than knocking out galleries.....

I don't want to waste my time reinventing the wheel if I don't have to. :)

What software you use to develop has nothing to do with the security of the app your making..
Tell them security costs extra, and read up on security.

you will write that web app in?

DW comes with pre-made functions for logging in etc - So what I am asking really is are those functions secure?

He is planning to use some pre-built libraries that come with DW...if those happen to have security holes, then you are fucked... but realistically, if you keep up with DW updates, it should be pretty safe... :2 cents:

PHP for sure - I prefer it to asp/jsp and I am hosting it and will not set up Tomcat just for them.

Thanks woj - That is pretty much what I needed to know. :thumbsup

Be sure to write for the very latest PHP then. Most of the many deprecated functions are deprecated because of serious security concerns. Also you'll have sinew work to do in php.ini. With version 5.3 and the upcoming 6.0 PHP it's getting significant security improvements because such improvements were needed. Still, it's currently not possible to write a PHP script that doesn't have a specific dos vulnerability. See also phpids.

Use a framework and the security will not be a big problem unless you're a incompetent programmer.

Nice one!!

Thanks

:1orglaugh

If you are unable to create your own login function then you should not be taking on this job.

I probably could, but why bother when some of the best coders around have already done it for me? - I paid a fair amount of cash for DW and its functionality....