Welcome Guest, Not a member yet? Register   Sign In
input->xss_clean logs out (destorys session), if given specific input
#1

[eluser]pmhart[/eluser]
I am working guitar tab submission site. When I enter the tab for "Hotel Califorina", given all the ascii chars that represent a measure / note, etc, it seems to violate the CI xss_clean function. The result CI seems to clear the session (log me out) and then my submission process takes me back to the start page (following my code that will not allow non-logged in users to proceed past the start page).

This is very frustrating, the ascii that represents the tab is in no way an xss attack. Perhaps I should write my own xss filter?

Any suggestions on custom xss filters?
#2

[eluser]pmhart[/eluser]
Actually ... I turned off the xss_clean and it still logs me out (clears session) ... Is it a size restriction?

It seems that, it happens when I set the session to store this value, if it's this particular tab, it will clear the session.




Theme © iAndrew 2016 - Forum software by © MyBB