Whynick / ebattles

Automatically exported from code.google.com/p/ebattles
0 stars 0 forks source link

Improve forms security, by filtering all data before SQL insertion. #57

Open GoogleCodeExporter opened 8 years ago

GoogleCodeExporter commented 8 years ago
Improve forms security, by filtering all data before SQL insertion.

Using e107 functions to filter data.
 - Posted data is filtered by $tp->toDB() function before insertion in 
database.
 - Displayed data is filtered by $tp->toHTML() function before being 
displayed.

Original issue reported on code.google.com by frederic...@gmail.com on 11 Dec 2009 at 4:54

GoogleCodeExporter commented 8 years ago
Done for textareas only in revision 147 using e107 parsing function. (issue 58, 
issue 
9)

Original comment by frederic...@gmail.com on 11 Dec 2009 at 8:34