33 reputation
3
bio website
location
age
visits member for 2 years, 2 months
seen Apr 24 '12 at 20:15

Apr
22
awarded  Scholar
Apr
22
accepted Are SQL Injection vulnerabilities in a PHP application acceptable if mod_security is enabled?
Apr
14
awarded  Editor
Apr
14
comment Are SQL Injection vulnerabilities in a PHP application acceptable if mod_security is enabled?
Your point about their investment into the current codebase is spot-on. They've put a lot of time and money into this, and I'm not certain they can stomach discarding it. It's really a bad situation. Also, I agree that a poor codebase degrades quickly. I've seen it too--not only does quality of service suffer, but the product decays, morale at the company decays... it can really be poison for a startup.
Apr
14
revised Are SQL Injection vulnerabilities in a PHP application acceptable if mod_security is enabled?
added 660 characters in body
Apr
14
comment Are SQL Injection vulnerabilities in a PHP application acceptable if mod_security is enabled?
@jprofitt I'm not a security expert, I'm a generalist web developer; see addition to post.
Apr
14
comment Are SQL Injection vulnerabilities in a PHP application acceptable if mod_security is enabled?
@Madbreaks What I'm interested in here is my responsibility to my clients' interests. Obviously I'm not endorsing this until they fix at least SQL Injection and XSS, but they want to launch, and it'd be a huge hardship for them to start over. At the same time, I worry, as some have said in the answers, that their application will age very badly and it will present a worse outcome in the long run to go live on this code.
Apr
14
awarded  Student
Apr
14
comment Are SQL Injection vulnerabilities in a PHP application acceptable if mod_security is enabled?
@Madbreaks. Right.
Apr
13
asked Are SQL Injection vulnerabilities in a PHP application acceptable if mod_security is enabled?