hdelgg
hd
Form and related plugins
User-generated content, flexible user and group profiles, registration forms, custom file forms
Plugin Development
Talking about how to write plugins
hd replied on the discussion topic How to use longtext input securely?get_input() will do all the work, just keep htmlawed enabled.
If get_input() does it itself, what is the porpose of sanitise_string() ?
Elgg's API built in a way to protect you from XSS injections. All DB queries are sanitized by default, so unless you are writing a custom sql, you can bypass sanitizing.
get_input() will run user input through htmlawed and strip all unsafe tags, the rest will be sanitized before being added to the database.
- hd joined the group Plugin Development
- hd added a new discussion topic Is there any Emailthis plugin? in the group Form and related plugins
- hd joined the group Form and related plugins
- hd joined the group General Discussion
