News Feed
Sections




News Archive
Looking for more information on how to do PHP the right way? Check out PHP: The Right Way

NETTUTS.com:
Secure Your Forms With Form Keys
June 12, 2009 @ 13:09:12

In this new tutorial NETTUTS.com suggests an alternative method to secure your website's forms - "form keys".

Security is a hot topic. Ensuring that your websites are secure is extremely important for any web application. In fact, I spend 70% of my time securing my applications. One of the most important things we must secure are forms. Today, we are going to review a method to prevent XSS (Cross-site scripting) and Cross-site request forgery on forms.

The "form keys" are special hashes generated each time the form is generated and submitted along with the other POSTed information to verify that the form came from the right place. The example they include shows how to create a simple login form that uses a class for generation and validation of the form's key.

0 comments voice your opinion now!
tutorial key form secure


blog comments powered by Disqus

Similar Posts

DZone.com: How to Use Flash for File Upload with PHP

Chris Ravensroft's Blog: How To Setup PHP5 with Tomcat 5

PHPBuilder.com: An Introduction to Graphs Using PEAR\'s Image_Graph Package

CodeHeaps.com: Creating a Blog Using Laravel 4 (Series)

Wojciech Sznapka's Blog: Loosening dependencies with closures in PHP


Community Events

Don't see your event here?
Let us know!


threedevsandamaybe voicesoftheelephpant community language security framework api release laravel introduction version interview podcast laravel5 series opinion symfony library unittest extension

All content copyright, 2015 PHPDeveloper.org :: info@phpdeveloper.org - Powered by the Solar PHP Framework