Sign Up to our social questions and Answers Engine to ask questions, answer people’s questions, and connect with other people.
Login to our social questions & Answers Engine to ask questions answer people’s questions & connect with other people.
Lost your password? Please enter your email address. You will receive a link and will create a new password via email.
Please briefly explain why you feel this question should be reported.
Please briefly explain why you feel this answer should be reported.
Please briefly explain why you feel this user should be reported.
I built an API and I would like to test it.
I already did my tests but I want to make sure that it is somehow secure by brute forcing it with a common list of known dangerous user inputs
It is written in PHP and MySql
Some of you might disagree whether brute force is a good practice here or not, but it’s an extra safety measure
OWASP provides a pretty good cheat sheet that might answer your questions: https://www.owasp.org/index.php/PHP_Security_Cheat_Sheet