Security Corner: Direct Object References

Building APIs in PHP often exposes us to the potential of obscure bugs that can otherwise compromise the security of our application. Building too pure of an API - and relying on clients to provide too much information about the objects they’re referencing - is one such risk.