Đang chuẩn bị liên kết để tải về tài liệu:
Pro PHP Security phần 2

Thay vì sử dụng một biểu tượng thương hiệu với tất cả sự xuất hiện của một tên đã đăng ký nhãn hiệu, chúng tôi sử dụng tên duy nhất trong một biên tập thời trang và vì lợi ích của chủ sở hữu nhãn hiệu hàng hoá, không có ý định xâm phạm nhãn hiệu hàng hoá. Chì biên tập: Jason Gilmore kỹ thuật phản biện | CHAPTER 3 Maintaining Separate Development and Production Environments I n order to understand fully how maintaining separate development and production environments enhances security we need first to understand the role of each. The environments themselves are nothing more than the sites on which your scripts and data reside including the appropriate servers plus whatever else may be necessary to access those scripts and data such as the operating system and the shell. The heart of your production environment then is simply your production server which is accessed by the public. You may control this server yourself or you may share it with other users. We discussed the special requirements of maintaining security in this situation in Chapter 2. A properly maintained production server has the following characteristics Write access to a production server is limited to system administrators and normally nothing is placed on the server without having been reviewed for appropriateness. This limitation is put into place to facilitate the next characteristic. A production server hosts only live applications and finalized content. Unfinished or preliminary versions of applications and data should never be placed on this server except possibly under highly controlled test conditions for example when a client must have access to a routine that is still in development and for some reason that access is not possible on the development server or to perform tests that can only be accomplished in a production environment . This restriction makes it impossible except under those highly controlled test conditions for the public to inadvertently access any parts of your application except the finished ones. A production server is subjected to a rigorous backup schedule on at least a daily basis and those backups are stored off-site. This is done to ensure that should a catastrophic loss of data occur the system may be rolled back to a very recent prior state easily or at least .