Solved

When do you add security to your apps?

Posted on 2016-09-02
3
62 Views
Last Modified: 2016-09-02
When building a new php application do you create the security functions, validation etc at the same time as the functionality, or do you add it once you have the basic of the app working?

I created some very effective security functions, which seem to be slowing down development/testing. Wondering how others deal with this.
0
Comment
Question by:Stephen Forlance
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
3 Comments
 
LVL 83

Accepted Solution

by:
Dave Baldwin earned 250 total points
ID: 41782404
Security and validation pretty much must be built into the functions.  It is difficult to add it back in.  But just like anti-virus, it will slow things down.  Maybe you're 'overdoing' it.
0
 
LVL 110

Assisted Solution

by:Ray Paseur
Ray Paseur earned 125 total points
ID: 41782438
You might want to show us the code that is slowing things down.  We might be able to spot the issues.  Please include your test case information, so we can replicate your test environment and see the slowdown in action.

You might consider using the Laravel framework.  It will handle validation and security for you, with state-of-the-art processes that will not slow you down.

If you've created effective security functions, but wonder about performance, you might want to post them on GitHub and ask the open-source community to have a look, fork, send pull requests, etc.
0
 
LVL 53

Assisted Solution

by:Scott Fell, EE MVE
Scott Fell,  EE MVE earned 125 total points
ID: 41782446
I would say it depends.  

I like to add log in from the start because many functions rely on logged in state (at least for what I work on).  But when I am creating a new page that may be more complex, I may create a single page with only my raw server side code.  Once I am happy with my logic, I add a new page and incorporate what I created in my test page.
0

Featured Post

Put Machine Learning to Work--Protect Your Clients

Machine learning means Smarter Cybersecurity™ Solutions.
As technology continues to advance, managing and analyzing massive data sets just can’t be accomplished by humans alone. It requires huge amounts of memory and storage, as well as the high-speed power of the cloud.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

There's a lot of hype surrounding blockchain technology. Here's how it works and some of the novel ways it' s now being used - including for data protection.
Do you know what to look for when considering cloud computing? Should you hire someone or try to do it yourself? I'll be covering these questions and looking at the best options for you and your business.
Explain concepts important to validation of email addresses with regular expressions. Applies to most languages/tools that uses regular expressions. Consider email address RFCs: Look at HTML5 form input element (with type=email) regex pattern: T…
Email security requires an ever evolving service that stays up to date with counter-evolving threats. The Email Laundry perform Research and Development to ensure their email security service evolves faster than cyber criminals. We apply our Threat…

739 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question