Tag: ASVS 2.7
-
OWASP A3 – Broken Authentication and Session Management Defenses with PHP Part 5
We are finishing up OWASP A3 today. Yay! I haven’t decided which section I will cover next, probably something fun like XSS or SQLi mitigations. Picking up where we left off, we are at ASVS 2.7… ASVS 2.7 Requirement: Verify that the strength of any authentication credentials are sufficient to withstand attacks that are typical…