Developers Orbit

First no I don’t mean crackers or “black-hat hackers”! I am talking about people who go thru code and finde security issues. You could compare them with the people who do the crash test with cars. They look for errors which could be fatal and get paid for it. Whats the difference between a white-hat and a black-hat? Its simple the first “kind” want to secure your websites and either tell you where the error is or want money for it. Crackers want to do bad stuff they want you to be frustrated don’t give you a clue and tend to do illigal things with your server once its been “cracked”. So if you can’t get a white-hat to hack and secure your code, then you should learn yourself ;)  I can’t advise you any english books since I mostly have tought myself but some things you should always keep in mind: “never trust the users input”, “every input which is going thru JS has to be checked” and “get all the updates you can get!”.