added security page

developer_manual/index.rst

@@ -14,6 +14,7 @@ Contents
    configfile
    templates
    unittests
+   security
 
 
 

developer_manual/security.rst

@@ -0,0 +1,17 @@
+Security
+========
+
+Blacklisted PHP functionality
+-----------------------------
+**echo, print(), <?=**
+ Use $this->p in templates instead
+**error_log** 
+ Use throw new Exception("Description") instead
+**==** 
+ Use === instead
+**!=** 
+ Use !== instead
+**rand(), srand(), mt_rand()**
+ Use openssl_random_pseudo_bytes() instead
+
+TBD