Talk comments

Well done!

I also would have liked some more concrete examples. Perhaps take a form and show how to add the layers to it.

Great talk with basic level of knowledge for securing a web application. If you've been around PHP a while you may think this outdated or obvious, but I can tell you I know people that still argue against validating on the server side if they're already doing it on the client side...for API requests...

Anonymous at 11:24 on 18 Oct 2013

Good talk, but spoke very quickly at times. Perhaps a bit less content would allow for a slower paced presentation.

I enjoyed the prison theory spin on PHP security as well as the personal antidotes to make the talk interesting. Would of enjoyed more in-depth examples and best practices over the usual cry of "security is important".

I like the concept of thinking of your application as a prison with guards, watch towers, gates and the whole lot. The personal story telling made it even more appealing.

Thanks for sharing and making us more paranoid!

Anonymous at 11:21 on 18 Oct 2013

Great presenter, minimal slides. Kept my focus throughout.

Never heard someone suggest using obfuscation to improve security with a straight face.

Good talk!
Just 2 small things:
1) the code snippets seemed too easy
2) would like to see some images also in the slides

Good job overall! Cheers!

I agree with the comments on going more in depth. I typically like talks that aren't very high-level or abstract. (At least not for very long)