Skip to content

Latest commit

 

History

History
executable file
·
53 lines (32 loc) · 1.57 KB

README.md

File metadata and controls

executable file
·
53 lines (32 loc) · 1.57 KB
Raw

securityClass

This is a set of class which can secure the application against XSS and SQL Injection.

This class will also help to fight against the Cross-Site Request Forgery (CSRF).

There are 2 different classes for both the functionalities which can be used in package as well as independent class.

Usage for FilterClass

  1. For Filtering a Single value

    $objString = FilterClass::prepareDataObject($valueToFilter, $filterArray); $finalValue = FilterClass::filterDataValue($objString);

    In Above a. $valueToFilter: Teh value which can to be filtered b. $filterArray: operation to be performed on the string eg: $filterArray = array('strip_tags' => array(), 'addslashes' => array());

  2. For Filtering the complte array $resultArray = FilterClass::filterXSS($arrayToFilter);

    In Above: $arrayToFilter: This is the array to be filtered ($_POST, $_GET, $_REQUEST, or any array with values);

    Note: This is only to filter XSS

Usage for RestrictCSRF Class

  1. Simply add value attribute to your input tag similar to

    value=""

    in the form for which you want the CSRF Protection to be implemented

  2. And on POST on the action page check

    if(!RestrictCSRF::checkToken(form_name_value, $array_to_be_checked)) { redirect('index.php'); }

    In above:

    a. form_name_value: name of the form on the design page b. $array_to_be_checked: the array which contains the CSRF token ($_POST, $_GET, $_REQUEST) as per the implementation.