PUBLIC MARKS from dzc with tags "serveur web" & securité

Each release branch of PHP is fully supported for two years from its initial stable release. During this period, bugs and security issues that have been reported are fixed and are released in regular point releases. After this two year period of active support, each branch is then supported for an additional year for critical security issues only.

a new Certificate Authority: It’s free, automated, and open. Arriving Mid-2015 Anyone who has gone through the trouble of setting up a secure website knows what a hassle getting a certificate can be. Let’s Encrypt automates away all this pain and lets site operators turn on HTTPS with a shell command. When Let’s Encrypt launches in Summer 2015, enabling HTTPS for your site will be as easy as installing a small piece of certificate management software on the server:

"Checklist pour le fichier php.ini Voici une checklist de sécurité, qui passe en revue toutes les directives PHP et leur donne une valeur plus contraignante que la valeur fournie par défaut dans PHP. Limitez les ressources et les abus, soyez vigilents sur les ressources et fonctionnalités que vous laissez disponibles sur le site. Le seul point discutable et l'utilisation du safe_mode, qui ne sert pas à grand chose. Même en version gid."