Lets Hack a Website - Craig Francis - PHPSW: Security in Web Applications

'Lets Hack a Website ', presented by Craig Francis at the PHPSW 'Security in Web Applications' night at Bath Digital Festival in October 2017.

We will look at the most (intentionally) insecure website ever created, and work out how many ways we can hack it - discussing each approach, with a quick demo, along with ways to fix the problems.

If you want to run this insecure website on your own computer (it's PHP based), then feel free to checkout/download this repository:

I'd advise you to not look in the "/public/security/answers/" folder until after the talk - only because it covers everything I'll be talking about.