基于PHP+MySQL的Web系统安全防范及全站静态化  

Security and website static technology of WEB system based on PHP+MySQL

作　　者：冯兴利[1] 锁志海[1] 徐墨[1] 

机构地区：[1]西安交通大学信息中心,陕西西安710049

出　　处：《现代电子技术》2012年第8期25-27,共3页Modern Electronics Technique

基　　金：教育部重点计划项目:下一代互联网大规模高清视频会议系统部署和应用示范(CNGI2008-118)

摘　　要：PHP语言以其强大的功能在动态网站建设中得到广泛应用,但因其本身的缺陷以及开发人员的安全意识不足,使得PHP网站存在各种Web安全漏洞。同时,随着网站信息量的增加,不仅Web应用服务器的负担随之增加,而且不利于提高网站内容被搜索引擎搜索到的几率。为此结合信息发布系统的开发经验,讨论PHP网站常见的安全漏洞以及相应的防范策略,确保系统安全,同时对全站静态化技术进行详细介绍,大大提高了Web服务器的运行效率。PHP is widely used in construction of dynamic website due to its powerful function,but various security vulnerabilities exsit still in PHP website because of its defects and the lack of developers＇ safety awareness.Meanwhile,with the increase of website information,not only the workload of WEB application server grows,but also the probability that the contents in the website are found by search engine is reduced.In combination with the experience of developing the information distribution system,common security vulnerabilities of PHP website and the corresponding prevention strategies ensuring the safety of the system are discussed.The static technology of website is described in detail.It greatly improves the operating efficiency of WEB server.

关 键 词：安全防范 静态化 PHP MYSQL 

分 类 号：TN919-34[电子电信—通信与信息系统] TP311.5[电子电信—信息与通信工程]