The sharing of login information between multiple sites, one solution is based on the Cookie-session login authentication method, which is more complex across domains.Another alternative is to use the method of algorithm-based authentication, JWT
This is the case. An automated scanning tool says my code has an XSS vulnerability. If you don't know what the XSS is, you can check it here.
Enable the csrf token of the codeigniter framework in my code, as follows:
For more information, see the
CodeIgniter is a lightweight, convenient MVC framework, the recent project involves batch upload, so, is to use the SWFUpload this plugin, although there are many on the internet on CI and swfupload posts, but, is not very complete, so, here
This article mainly introduced the CI Framework (CodeIgniter) Implementation of the import, export data operations, combined with an example of the CodeIgniter framework Libraies reference PHPEXCEL implementation of data import and export related
Considerations for php (codeigniter) Security
1. httponly
The session must use httponly. Otherwise, it may be attacked by xxs. Use js to obtain the cookie session_id.
Use the ci_session of the framework, the longer digits, and httponly. These are
CodeIgniter is a lightweight, convenient MVC framework, the recent project involved in bulk upload, so, is the use of swfupload this plug-in, although there are a lot of CI and swfupload posts, but not very complete, so, here to synthesize the
: This article mainly introduces the input class using codeigniter. if you are interested in the PHP Tutorial, refer to it. I recently wrote a system that does not have a secure filtering input. I want to use the CI input class. after analysis,
Recently wrote a system, no security filter input, want to use CI input class, analyzed the next, there are three files are required system/core under the
utf8.php,security.php,input.php
Can be integrated into a file, but more trouble, or three
Interface Requirements:
Output JSON
Single Entry
Security http://segmentfault.com/q/1010000000143852 based on token verification? Session
Cache
Session Cookie
Database
Configuration
Log
Public Folder
My framework:index.
The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion;
products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the
content of the page makes you feel confusing, please write us an email, we will handle the problem
within 5 days after receiving your email.
If you find any instances of plagiarism from the community, please send an email to:
info-contact@alibabacloud.com
and provide relevant evidence. A staff member will contact you within 5 working days.