General contributor guidelines

• Community code of conduct
• Development environment
  • Set up Web server and database
  • Get the source
• Security guidelines
  • SQL injection
  • Cross site scripting
  • Clickjacking
  • Code executions / file inclusions
  • Directory traversal
  • Shell injection
  • Auth bypass / privilege escalations
  • Sensitive data exposure
  • Cross site request forgery
  • Unvalidated redirects
  • Getting help
• Coding style & general guidelines
  • General
  • Labels
  • Coding
  • License headers
  • User interface
  • PHP
  • JavaScript
  • CSS
• Performance considerations
  • Database performance
  • Getting help
• Debugging
  • Debug mode
  • Identifying errors
  • Debugging variables
  • Using a PHP debugger (XDebug)
  • Debugging JavaScript
  • Debugging HTML and templates
  • Using alternative app directories