Menu

#11 check user inputs to protect from code insertion attacks

open
nobody
None
7
2005-03-22
2004-10-01
Joc
No

users may insert PHP code to sniff passwords etc.
Therefore all user inputs need to be validated and PHP
code tags e.g. <?php, <%, <script language="php"...
need to be removed.

Discussion

  • Joc

    Joc - 2005-03-22
    • priority: 5 --> 7
     
  • Joc

    Joc - 2005-03-22

    Logged In: YES
    user_id=788877

    Need a complete redesign of all input validations. Create
    some kind of security layer.

    Not important for prototype but crucial before production.

     

Log in to post a comment.