Q: What are common vulnerability points in PHP code auditing?

A: During a PHP code audit, common areas of concern include:

1. Database Queries: SQL injection vulnerabilities.
2. File Uploads: File upload vulnerabilities that could lead to remote code execution.
3. Permission Controls: Privilege escalation and unauthorised access.
4. Data Transmission: Lack of encryption or weak cryptographic practices.
5. Network Security: Misconfigured firewalls or insecure network protocols.
6. System Security: Vulnerabilities in the underlying operating system or installed software.
7. Other: Buffer overflows and path traversal attacks.