Welcome Guest, Not a member yet? Register   Sign In
Is trim enough for dropdown and checkbox/radiobox when validating form or should I also always use xss_clean?
#5

[eluser]boltsabre[/eluser]
Quote:Actually, the values of checkboxes, radios, and dropdowns are defined by you and cannot be altered by any ordinary user.

Yeah, well I would just throw that statement straight out the window. NEVER TRUST FORM DATA!!! With "out of the box" free hacking softwares, and plugins like tampadata, anyone who wants to can alter what data a form sends.

Quote:Anyway, knowing this fact, you should just check the value of your checkbox, radio, dropdown to be equivalent to any value of the options you were passing to the form
Sounds like a good way to do it! I didn't mention it before, but I often have arrays and stuff holding values of selects and what not, good idea to compare against it.


Messages In This Thread
Is trim enough for dropdown and checkbox/radiobox when validating form or should I also always use xss_clean? - by El Forum - 09-17-2012, 11:14 AM



Theme © iAndrew 2016 - Forum software by © MyBB