Ch. 6 - Securing Your Application

This chapter discuss the importance of security and making sure you have a secure site where people can access data without permission. 

Things Learned:

HTTP provides a simple way to secure a page using PHP. When someone tries to access the admin page,  a pop window will display requesting a user name and password from the user. HTTP authentication involves establishing a line of communication between the browser and the server through HTTP. 

The dialog between the browser and server takes place through headers, little text messages with instructions. All web pages are displayed with the help of headers. 

Header function - header();

*should precede any HTML code in PHP script

Depending on what the user's types in, the headers can take three different actions: accept, retry or deny access

Different type of headers: location, refresh and content type header

"basic realm" - security zone