I have a page that POSTS data to another page.
In firebug I can see all my POST data being sent fine to the target page.
On the target page all the $_POST data is fine.
Now the problem I have occurs when I put a carriage return in any of my TEXTAREA inputs.
When I do this again in firebug the POST data is being sent, however in the target page if I do a print_r($_POST) the TEXTARA value is blank!?
This is odd no?
Turned out it was an include class that was sanitizing the $_POST...and was a little over sensitive.
Can anyone comment on this approach, IE sanitise the POST vars, stick them back in POST to be used in a snippet.
I guess MODx uses this approach for cleaning dangerous input from the $_POST.
-
☆ A M B ☆
- 3,112 Posts
we’re under a serious discussion about modx’s security on
my other post.
Jason gave me a clue about what Revo does on the $_POST submission (see his comment on the bottom).
Perhaps that’s what you’re after.
Rico
Genius is one percent inspiration and ninety-nine percent perspiration.
Thomas A. Edison
MODx is great, but knowing how to use it well makes it perfect!
www.virtudraft.com
Security, security, security! |
Indonesian MODx Forum |
MODx Revo's cheatsheets |
MODx Evo's cheatsheets
Author of
Easy 2 Gallery 1.4.x,
PHPTidy,
spieFeed,
FileDownload R,
Upload To Users CMP,
Inherit Template TV,
LexRating,
ExerPlan,
Lingua,
virtuNewsletter,
Grid Class Key,
SmartTag,
prevNext
Maintainter/contributor of
Babel
Because it's hard to follow all topics on the forum, PING ME ON TWITTER
@_goldsky if you need my help.