News Feed
Sections




News Archive
Looking for more information on how to do PHP the right way? Check out PHP: The Right Way

NETTUTS.com:
Secure Your Forms With Form Keys
June 12, 2009 @ 13:09:12

In this new tutorial NETTUTS.com suggests an alternative method to secure your website's forms - "form keys".

Security is a hot topic. Ensuring that your websites are secure is extremely important for any web application. In fact, I spend 70% of my time securing my applications. One of the most important things we must secure are forms. Today, we are going to review a method to prevent XSS (Cross-site scripting) and Cross-site request forgery on forms.

The "form keys" are special hashes generated each time the form is generated and submitted along with the other POSTed information to verify that the form came from the right place. The example they include shows how to create a simple login form that uses a class for generation and validation of the form's key.

0 comments voice your opinion now!
tutorial key form secure


blog comments powered by Disqus

Similar Posts

DevShed: Getting PHP to Talk to MySQL

Tobias Schlitt\'s Blog: The eZ components tutorial online

MaltBlue.com: Zend Framework 2 Event Manager - A Gentle Introduction

Juan Treminio: Unit Testing Tutorial Part V: Mock Methods and Overriding Constructors

Jeremy Johnstone's Blog: PHP parser for OS X plist XML files


Community Events

Don't see your event here?
Let us know!


framework opinion php7 configure example interview community series laravel api language composer part2 application project list podcast symfony yii2 introduction

All content copyright, 2015 PHPDeveloper.org :: info@phpdeveloper.org - Powered by the Solar PHP Framework