Path: csiph.com!v102.xanadu-bbs.net!xanadu-bbs.net!feeder.erje.net!eu.feeder.erje.net!news-1.dfn.de!news.dfn.de!news.informatik.hu-berlin.de!fu-berlin.de!uni-berlin.de!individual.net!not-for-mail
From: "J.O. Aho" <user@example.net>
Newsgroups: comp.lang.php
Subject: Re: LAMP starting point
Date: Fri, 18 Oct 2013 20:17:51 +0200
Lines: 26
Message-ID: <bcdcagFe5vdU1@mid.individual.net>
References: <9fa640f8-ab6e-49a5-954c-b34c9f3a55c1@googlegroups.com>
Mime-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
X-Trace: individual.net ulWJWkzKKHrevMZ68ukMaQMxbA8Yg717ElTZpsh+WGoDjQZg/+
Cancel-Lock: sha1:TNilBCVzEu29l/VU+bVcZaE6feI=
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:24.0) Gecko/20100101 Thunderbird/24.0
In-Reply-To: <9fa640f8-ab6e-49a5-954c-b34c9f3a55c1@googlegroups.com>
Xref: csiph.com comp.lang.php:11449

On 18/10/13 16:00, Rudra Banerjee wrote:

> I am an  enthusiast with zero background knowledge in database and php.
> I have got some space in a server to setup a database (its not a paid project).
> I will use LAMP to setup the database (i.e. database of book's catalogue. like a library) that can be freely used and updated by anonymous users.

Something no one here pointed out which I think it's important, use the 
apache/mysql/php provided by your distribution, do not try to download 
some packages which will include those, you may end up with a package 
with a number of security issues and no information when you should update.
Using the distributions packages will give you security updates and 
usually stability where version bumps are moderate.

Don't expect someone will hand out you a full solution, people here will 
help you and point out the proper way to do things, but as we do not get 
paied we will not give a finished solution.

IMHO a good point to start at is php.net, you will get good information 
about how to use functions and many good comments too. As Jerry says, 
string handling is really important, you want to prevent any kind of 
injection (sql, mail header, ldap and so on). White listing input data 
is the right way to go.

-- 

  //Aho