sanitization
Codeigniter output and input security
In case of user submitted text, when outputting to the page, what text filter do you use both in input and output?开发者_开发知识库[详细]
2023-04-11 23:59 分类:问答PHP Santizing/Validating Array of Integers
I have the following array and would like to know what the best way would be开发者_开发技巧 of validating and santizing this array to make sure only integers are allowed?[详细]
2023-04-11 04:03 分类:问答How to sanitize input with PHP and the sqlsrv driver?
I\'m working on a PHP MSSQL project that is using the sqlsrv driver. What\'s the best way to stop SQL injection at开发者_如何学Gotacks? I need something like mysql_real_escape_string() but for sqlsrv[详细]
2023-04-09 17:45 分类:问答Is there risk to having unsanitized user input display in a textarea?
I save two versions of user input in the following sequence: Untrusted user enters raw markdown. Raw markdown is stored in one table.[详细]
2023-04-06 06:25 分类:问答Sanitizing MSSQL (&/OR Putting HEX into a TEXT Column)
Overview I\'m in need of a way to properly sanitize my MSSQL data. We all know addslashes() and htmlentities() doesn\'t cut it.[详细]
2023-04-06 04:25 分类:问答What is the best word-wrapping method?
I have two questions for you guys: Which is the proper way ot word-开发者_如何学Pythonwrap a user made comment? I mean, I[详细]
2023-04-06 04:04 分类:问答How to preserve tags inside pre or code while sanitizing?
I need some way to preserve tags inside a code or a pre block, while sanitizing. For example: <a href=\"http://sanitize.com\">link</开发者_运维技巧a>[详细]
2023-04-03 15:14 分类:问答Make an arbitrary function safe to run?
I\'m writing the docs of my program online, in a wiki, and my intent is to rip that content from the program itself, either from time to time or on demand.[详细]
2023-04-03 11:06 分类:问答Ensuring the information after ? is an integer
I\'ve moved from HTML to PHP coding, so when I wanted to make a link for my news page I used HREF to take the id for the row as a link and make the title of the piece the viewable/clickable link:[详细]
2023-03-31 02:11 分类:问答PHP : Which is more efficient in sanitizing $_get variable?
The string $title is expected only to be lowercase alpha-numeric or the symbol \"-\" . In this situation which of the following methods is efficient defense against security vulnerability?[详细]
2023-03-25 03:34 分类:问答