News Feed
Sections




News Archive
Looking for more information on how to do PHP the right way? Check out PHP: The Right Way

NETTUTS.com:
Secure Your Forms With Form Keys
June 12, 2009 @ 13:09:12

In this new tutorial NETTUTS.com suggests an alternative method to secure your website's forms - "form keys".

Security is a hot topic. Ensuring that your websites are secure is extremely important for any web application. In fact, I spend 70% of my time securing my applications. One of the most important things we must secure are forms. Today, we are going to review a method to prevent XSS (Cross-site scripting) and Cross-site request forgery on forms.

The "form keys" are special hashes generated each time the form is generated and submitted along with the other POSTed information to verify that the form came from the right place. The example they include shows how to create a simple login form that uses a class for generation and validation of the form's key.

0 comments voice your opinion now!
tutorial key form secure


blog comments powered by Disqus

Similar Posts

Juozas Kaziukenas' Blog: Web scraping with PHP and XPath

IBM developerWorks: Use Ajax with PHP and DB2 9 - Xajax

Joshua Eichorn's Blog: Adding AJAX to a Website step by step, Part II

NETTUTS.com: Scanning Folders with PHP

Matthew Turland: Customizing Codeception Database Cleanup


Community Events





Don't see your event here?
Let us know!


tool opinion application update framework symfony podcast version laravel series interview community voicesoftheelephpant composer language security library introduction release package

All content copyright, 2014 PHPDeveloper.org :: info@phpdeveloper.org - Powered by the Solar PHP Framework