Welcome Guest, Not a member yet? Register   Sign In
Security with CI
#3

(This post was last modified: 03-28-2018, 11:24 AM by jreklund.)

You should not use xss_clean on input
https://www.codeigniter.com/user_guide/i...ation-rule

Use html_escape on output instead
https://www.codeigniter.com/user_guide/g...tml_escape

If you need users to submit html use
http://htmlpurifier.org/

If users submit data with AJAX they are till vulnerable to CSRF, so please add that.
Reply


Messages In This Thread
Security with CI - by codeguy - 03-21-2018, 10:07 AM
RE: Security with CI - by adsheff - 03-27-2018, 01:59 AM
RE: Security with CI - by jreklund - 03-27-2018, 09:08 AM
RE: Security with CI - by InsiteFX - 03-28-2018, 04:11 AM
RE: Security with CI - by codeguy - 04-21-2018, 06:01 PM
RE: Security with CI - by InsiteFX - 04-22-2018, 04:11 AM
RE: Security with CI - by codeguy - 05-01-2018, 11:47 AM
RE: Security with CI - by Narf - 05-01-2018, 01:50 PM
RE: Security with CI - by skunkbad - 05-01-2018, 02:40 PM
RE: Security with CI - by albertleao - 05-01-2018, 03:38 PM
RE: Security with CI - by yiujia - 05-11-2018, 10:55 PM



Theme © iAndrew 2016 - Forum software by © MyBB