Security and paginate

Security and paginate

kenjis
Administrator
Posts: 3,671
Threads: 96
Joined: Oct 2014
Reputation: 231

11-05-2021, 06:10 AM

(11-02-2021, 04:38 PM)includebeer Wrote: So I think the best practice would be to type cast the page number to "int" and if the number is <= 0 set the page number to 1. In this particular case, I would blame the framework for not sanitizing the page number since it's a built-in feature of the Pagination library.

CI4 does what you say.
See https://github.com/codeigniter4/CodeIgni...#L415-L417

ci-phpunit-test | CodeIgniter Testing Guide | CodeIgniter 3 to 4 Upgrade Helper

Messages In This Thread

Security and paginate - by captain-sensible - 11-02-2021, 03:57 AM

RE: Security and paginate - by includebeer - 11-02-2021, 04:38 PM

RE: Security and paginate - by kenjis - 11-05-2021, 06:10 AM

RE: Security and paginate - by kenjis - 11-02-2021, 09:11 PM

RE: Security and paginate - by captain-sensible - 11-04-2021, 09:28 AM

RE: Security and paginate - by salain - 11-03-2021, 01:08 AM

RE: Security and paginate - by kenjis - 11-03-2021, 01:17 AM

RE: Security and paginate - by includebeer - 11-05-2021, 02:29 PM