Innocent Code: A Security Wake-Up Call for Web Programmers

版权声明：原创作品，允许转载，转载时请务必以超链接形式标明文章原始出版、作者信息和本声明。否则将追究法律责任。http://blog.csdn.net/topmvp - topmvp
*This concise and practical book shows where code vulnerabilities lie-without delving into the specifics of each system architecture, programming or scripting language, or application-and how best to fix them
*Based on real-world situations taken from the author's experiences of tracking coding mistakes at major financial institutions
*Covers SQL injection attacks, cross-site scripting, data manipulation in order to bypass authorization, and other attacks that work because of missing pieces of code
*Shows developers how to change their mindset from Web site construction to Web site destruction in order to find dangerous code

http://rapidshare.com/files/53017483/0470857447.rar
http://depositfiles.com/files/1659720