search

newhck / php-form-builder-class

Automatically exported from code.google.com/p/php-form-builder-class
GNU General Public License v3.0
0 stars 0 forks source link

security with php validation #80

Closed GoogleCodeExporter closed 8 years ago

GoogleCodeExporter commented 8 years ago 
How does this class prevent someone who modifies the html of the web page and 
changes the validation parameters on the html form?

Does the class do something with session variables to store the form on the 
server then deliver it to the client then check? You should document how the 
php validation is secure from people who modify the HTML.

Original issue reported on code.google.com by K2xL....@gmail.com on 18 Oct 2010 at 6:06

GoogleCodeExporter commented 8 years ago 
Yes, PHP Sessions are used within the project's validate function.  Modifying 
the html of the webpage should not have any effect on PHP validation.  If you 
find a case that does, feel free to provide me with the specifics and I will 
work to remedy.

- Andrew

Original comment by ajporterfield@gmail.com on 20 Oct 2010 at 8:51

GoogleCodeExporter commented 8 years ago 
For future reference, please post general questions about this project on the 
mailing list at groups.google.com/group/php-form-builder-class.  This utility 
is meant for reporting bugs.

Thanks,
Andrew

Original comment by ajporterfield@gmail.com on 20 Oct 2010 at 8:53