You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
19 lines
711 B
19 lines
711 B
Please note that main.inc.php, which should be called by index.php, does
|
|
the following:
|
|
|
|
unset($_REQUEST);
|
|
unset($_GET);
|
|
unset($_POST);
|
|
|
|
So, you must use \tts\safer_io::sanitize(....); to get those input vars!!!
|
|
That method, returns an array of fields, html, and errors, I'll break that down:
|
|
fields are the raw or result of the filter_input function,
|
|
html is passed an function to escape or sanitize the HTML output in someway (so use it for any output on views),
|
|
errors will have an count > 0 if validation rules were not meet.
|
|
|
|
Alternatively; use the built in PHP filter_input function.
|
|
|
|
Likewise, if not using sanitize... then for all HTML output use
|
|
\tts\safer_io::h(...) to escape it.
|
|
|
|
|