extend "secure-development"

[ischommer]

http://doc.silverstripe.com/doku.php?id=secure-development

• secured pages
• authentication
• permission-control
• preventing XSS
• controller-security (underscore/private methods)
• php security (e.g. safemode, register_globals, links only)
• Security::defaultAdmin
• merge with http://doc.silverstripe.com/doku.php?id=how-page-security-works

Sean: I notice there is a lot of interest about security - in terms of being able to secure the site. We know there are ways to do it, but there is no ‘best practise’ way that I can see. Perhaps a tutorial would be good.

Ingo: I think this should be more use-case/best-practice focused. a tutorial just makes sense with a certain goal in mind, but "secure development" is too widespread for this.