Professional Biography
Hi, I’m Chris Shiflett, a web craftsman from Brooklyn, NY, and a founding member of Analog, where I work with some of the most talented people I know making things I love, like Mapalong and Brooklyn Beta.
I blog at shiflett.org, and I’m @shiflett on Twitter. In 2007, I started PHP Advent, an annual Advent calendar for the PHP community. Since 2009, I’ve been part of Studiomates, a coworking studio in Brooklyn.
I have authored and co-authored a few books — most notably Essential PHP Security and HTTP Developer’s Handbook — and I sometimes write articles for publications like Smashing Magazine, where I also serve on the editorial panel.
My love for sharing ideas has lead me to speak at some of my favorite conferences — like Webstock, OSCON, South by Southwest, and the Future of Web Apps — and attend events like Foo Camp, Kiwi Foo Camp, and the Microsoft Web Dev Summit.
When not in front of a computer, I can usually be found playing soccer in Prospect Park or riding my single-speed bicycle around Brooklyn.
Projects
- Mapalong
- Mapalong is an app for remembering your favorite places and telling your story.
- Brooklyn Beta
- Brooklyn Beta aims to be the friendliest web conference ever.
- PHP Advent
- PHP Advent is an annual Advent calendar for the PHP community.
Interviews
- Interview with Chris Shiflett
- Ben Waine interviewed me in June 2010, after my keynote at the Dutch PHP Conference in Amsterdam.
- Chris Shiflett Talks About Webstock
- Nigel Parker interviewed me in February 2010 about Webstock.
- Reflection on Chris Shiflett
- Anurag Agarwal interviewed me in April 2007 for his web site series on web app security people.
- Picking Brains with Chris Shiflett
- I was interviewed by Ronald van den Heetkamp in February 2007 for the now-defunct Hacker Webzine.
- Interview: Chris Shiflett of Essential PHP Security
- Keith Casey interviewed me in December 2005 about Essential PHP Security.
Books
- Essential PHP Security
- Published by O’Reilly in 2005, this is a small book on web app security with a specific emphasis on PHP.
- HTTP Developer’s Handbook
- This is my first book, published by Sams in 2003. It is still the only book I know that aims to teach web developers HTTP.
Please see books for more details and reviews.
Book Contributions
- Programming PHP
- I wrote the chapter on security for this book, published by O’Reilly in 2006.
- PHP Cookbook
- I wrote about a dozen recipes for this book, published by O’Reilly in 2006.
- PHP in Action
- I am listed as a co-author, but I only wrote the chapter on security for this book, published by Manning in 2007. It's my most recent attempt to summarize what a PHP developer should know about security.
Publications
- Smashing Magazine
- I have only written once for Smashing Magazine, but I hope to change that soon. I serve on the editorial panel, so I frequently offer feedback for aspiring authors.
- PHP Architect
- I used to write a regular column for PHP Architect called Security Corner. They were nice enough to let me retain all the rights, so I can make them available here.
- PHP Magazine
- I used to write a regular column called Guru Speak for the now-defunct PHP Magazine.
- 2600: The Hacker Quarterly
- I wrote my first two articles for 2600, a quarterly magazine I used to read regularly.
The full list of published articles is also available with some useful and current discussion in the comments.

Hi, I’m Chris. Welcome to my site.





















