This paper analyzes the security of PHP from aspects of global varia bles, ftp, library files, session files and these function being easy to make mi stakes,and puts forward some useful suggestions for how to strengthen the secur ity of PHP.

• 从全局变量、文件上传、库文件、Session文件和容易出错的函数等方面分析了PHP程序的安全性,并且对如何增强PHP程序的安全性提出了一些建议。