CodeIgniter Forums - Search Results

Search Results

Thread: Best practice of handling user's input
Post: RE: Best practice of handling user's input

Narf Wrote: (02-21-2016, 06:41 AM) -- Geril Wrote: (02-21-2016, 05:38 AM) -- Quote: -- It automatically escapes the data, yes. But you should always validate it regardless of that and here you are...

Thread: Best practice of handling user's input
Post: RE: Best practice of handling user's input

Quote: -- It automatically escapes the data, yes. But you should always validate it regardless of that and here you aren't even checking what fields are there in $user_data. -- This is done in ...

Thread: Best practice of handling user's input
Post: RE: Best practice of handling user's input

Let's assume that I am filtering data on output not input, so it's possible that I will have in my DB as user's first name something like this? Code: -- You are hacked: alert('Lorem Ipsum'); -- ...

Thread: Best practice of handling user's input
Post: RE: Best practice of handling user's input

Narf Wrote: (02-20-2016, 03:25 PM) -- You're mixing input handling with concerns over output-based vulnerabilities. Input should be validated, not filtered; i.e. don't use $this->input->post('var'...

Thread: Best practice of handling user's input
Post: Best practice of handling user's input

Hi, I wonder what is the best and the most secured way of handling user's input. Basically I have form for user's profile made by form helper like this: Code: -- echo form_open(); echo fo...