hmmm ... I would think that the output-protected approach should be run anytime the content of user-collected data is being re-displayed, so that if any sql-injection or other attack would be averted.
Results 1 to 9 of 9
Hybrid View
-
28 Oct 2008, 10:37 AM #1
Sensei
- Join Date
- Jan 2004
- Posts
- 66,443
- Plugin Contributions
- 279
Re: Attribs zen_output_string_protected
.
Zen Cart - putting the dream of business ownership within reach of anyone!
Donate to: DrByte directly or to the Zen Cart team as a whole
Remember: Any code suggestions you see here are merely suggestions. You assume full responsibility for your use of any such suggestions, including any impact ANY alterations you make to your site may have on your PCI compliance.
Furthermore, any advice you see here about PCI matters is merely an opinion, and should not be relied upon as "official". Official PCI information should be obtained from the PCI Security Council directly or from one of their authorized Assessors.
-
28 Oct 2008, 10:41 AM #2
Zen Follower
- Join Date
- Dec 2003
- Location
- Astoria, Or
- Posts
- 455
- Plugin Contributions
- 2
Re: Attribs zen_output_string_protected
It's options_values_name which is input on the admin side only?
-
28 Oct 2008, 05:51 PM #3
Sensei
- Join Date
- Jan 2004
- Posts
- 66,443
- Plugin Contributions
- 279
Re: Attribs zen_output_string_protected
Will have to do some further investigation. Here's a related post: http://www.zen-cart.com/forum/showthread.php?t=64115
.
Zen Cart - putting the dream of business ownership within reach of anyone!
Donate to: DrByte directly or to the Zen Cart team as a whole
Remember: Any code suggestions you see here are merely suggestions. You assume full responsibility for your use of any such suggestions, including any impact ANY alterations you make to your site may have on your PCI compliance.
Furthermore, any advice you see here about PCI matters is merely an opinion, and should not be relied upon as "official". Official PCI information should be obtained from the PCI Security Council directly or from one of their authorized Assessors.
