Re:Shield, A Security-Minded PHP Microframework
by Kudos on Friday July 27, 2012 @08:15AM
(#4300995)
That could do with being mentioned in the README, a large part of the problem with PHP is developers not knowing what method to use to sanitise strings. After seeing striptags mentioned explicitly, I expected the worst.
Re:Shield, A Security-Minded PHP Microframework
by JohnHaugeland on Friday July 27, 2012 @09:53AM
(#4301383)
He used DES for session security.
That's the worst.
https://github.com/enygma/shieldframework/blob/master/Shield...
at this line :
$value = htmlspecialchars($value);