From e334c472fb4be44feec3a73402fc4a2b062cbfc0 Mon Sep 17 00:00:00 2001 From: admin Date: Sat, 21 Oct 2006 19:44:22 +0000 Subject: --- user_guide/general/security.html | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) (limited to 'user_guide/general/security.html') diff --git a/user_guide/general/security.html b/user_guide/general/security.html index c3218cdba..e8f935d5b 100644 --- a/user_guide/general/security.html +++ b/user_guide/general/security.html @@ -12,7 +12,7 @@ @@ -84,7 +84,7 @@ minimize the possibility that malicious data can be passed to your application.

GET, POST, and COOKIE Data

GET data is simply disallowed by Code Igniter since the system utilizes URI segments rather than traditional URL query strings (unless -you have the query string option enabled in your config file). The global GET +you have the query string option enabled in your config file). The global GET array is unset by the Input class during system initialization.

Register_globals

@@ -100,7 +100,7 @@ retrieving data from your database.

Best Practices

-

Before accepting any data into your application, whether it be POST data from a form submission, COOKIE data, URI data, +

Before accepting any data into your application, whether it be POST data from a form submission, COOKIE data, URI data, XML-RPC data, or even data from the SERVER array, you are encouraged to practice this three step approach:

    @@ -116,15 +116,15 @@ Code Igniter provides the following functions to assist in this process:

  1. XSS Filtering

    -

    Code Igniter comes with a Cross Site Scripting filter. This filter looks for commonly +

    Code Igniter comes with a Cross Site Scripting filter. This filter looks for commonly used techniques to embed malicious Javascript into your data, or other types of code that attempt to hijack cookies -or do other malicious things. The XSS Filter is described here. +or do other malicious things. The XSS Filter is described here.

  2. Validate the data

    -

    Code Igniter has a Validation Class that assists you in validating, filtering, and prepping +

    Code Igniter has a Validation Class that assists you in validating, filtering, and prepping your data.

  3. -- cgit v1.2.3-24-g4f1b