mirror of
https://github.com/Cacti/documentation.git
synced 2026-10-28 23:58:02 +09:00
jpobeda
6423aad2ac
Spelling mistakes/typos Small addition to Standard-Documentation Merged @cigamit DevelopmentStandards wiki page to Standards-Code-Formatting as Overview. And whatever I forgot to mention :)
623 B
623 B
Security
General Validation
Never trust input regardless of where it is coming from! The responsibility falls on the library functions to ensure that potentially dangerous input does not introduce a security hole. Some sort of sanitation, validation, or quoting must be provided for all arguments in a function. This ensures that bad data does not make its way into an SQL string, a filename, an executable, or even another function.
Relying on JavaScript-based validation is nice for instant feedback to the user, but should not replace validation checking in the PHP code.
Copyright (c) 2018 Cacti Group