Question

Is there any system to check that a php script is secure or not?

Answer 1

Is there any system to check that a
php script is secure or not?

First, make sure that you have tried your best to make your application as secure as possible. And yes, you could use the famous Acunetix Web Vulnerability Scanner.

Some of the features include:

• SQL Injection
• Cross site scripting
• Web Security
• Directory Traversal
• Ajax Application Security
• Google Hacking

Recommedation:

I would recommend you to implement very famous HTML Purifier in your projects:

HTML Purifier is a standards-compliant
HTML filter library written in PHP.
HTML Purifier will not only remove all
malicious code (better known as XSS)
with a thoroughly audited, secure yet
permissive whitelist, it will also
make sure your documents are standards
compliant, something only achievable
with a comprehensive knowledge of
W3C’s specifications. Tired of using
BBCode due to the current landscape of
deficient or insecure HTML filters?
Have a WYSIWYG editor but never been
able to use it? Looking for
high-quality, standards-compliant,
open-source components for that
application you’re building? HTML
Purifier is for you!