Propuesta de un método utilizando técnicas de programación seguras para el desarrollo de aplicaciones web en entorno PHP para mitigar riesgos potenciales de seguridad.

Abstract

The research aimed to propose a method of development using secure programming techniques to reduce the risk of receiving computer attacks in web applications in Hypertext Pre-processor (PHP) programming language. The proposed method was developed with programming techniques for PHP 5.6.x that included seven stages: Parameterization of queries, data encoding, validation of all entries, implementation of identity and authentication controls, data protection, error and control of exceptions and adequate configuration, which were adapted from the different guides and recommendations of the Open Web Application Security Project (OWASP). The hypothesis "The proposed development method will improve the level of security of web applications around PHP in the face of possible computer attacks." Chi-Square was applied with a significance level of 0.05. The indicators were: Improvement in the level of security and total number of detected vulnerabilities, from a sample of eight users for the dependent variable and seven vulnerabilities for the independent variable, using surveys and vulnerability analyzer Acunetix Web Vulnerability Scanner respectively. According to the results obtained, prototype 2 Monitoring System and Safe Evaluation (S-SISEV) improved by 97% and 87.95%, respectively, in relation to prototype 1. It is concluded that the proposed method avoids some of the most common errors in programming and it is recommended to develop new programming techniques in PHP to cover vulnerabilities that were not considered.