Grocery CRUD |
If you are not sure it is safe, you had better you think it is not.
(03-02-2016, 04:29 AM)alexweb Wrote: Hello Someone on grocerycrud forum and github project repo told it's vulnerable to xss. Now it seems there is some solution but i think that are not committed. The author solution is on this commit . By the way, the best place to search information on that is GC forums and github searching for xss string :-D
I use GroceryCrud Enterprise for time. It's perfectly useless, easy to modify, easy to create all that you need.
John Skoumbourdis, the author, reply at your question in a few days, and the documentation is clear. (01-15-2020, 11:36 AM)nunenthal Wrote: I use GroceryCrud Enterprise for time. It's perfectly useless, easy to modify, easy to create all that you need.
I would love to give my input on this subject. Grocery CRUD, in the days of CodeIgniter 2/3 was pretty decent at first glance. It helped beginners incorporate views and pre-built models and such into a project and get CRUD started straight away. However, the truth is that it hasn't aged well and it is not at all practical or well developed. Perhaps in the future it will be rewritten and better optimized and better organized.
You can query your database and present your data in a far simpler way with CodeIgniters Query Builder and by following a basic MVC pattern (present your data within your views, let your models handle your business logic and let your controllers act as intermediaries). This can easily be achieved when you build reusable code modules that do all of your heavy lifting. Then, pull in only the classes and services that you need from these modules, into portions of the application that require them. These modules can be located practically anywhere on your server and be used in multiple applications, just as long as they are registered in the autoloader(s). Simpler to implement, extend, test and modify than anything Grocery CRUD brings to the table. Just my two cents on the matter for what it's worth. I hope it helps ![]()
“A reader lives a thousand lives before he dies. The man who never reads lives only one.”
George R.R. Martin
Check out my GitHub repositories
|
Welcome Guest, Not a member yet? Register Sign In |