2. PHPRunner General questions
  3. public web form security? how secure is it?
This topic is locked

public web form security? how secure is it?

 		1/9/2012 12:15:00 PM
PHPRunner General questions
L
 larryk author

hello,

i saw that PHPR is, has some good results in blocking, preventing hacking attempts or provides a good protected form... but those were older (dated?)
so i wanted to ask today ---

using the default (no custom coding) -- How well protected is a web form (the add screen) for public use on a site?
is it great, as is?

or do you need to custom code various security checks, prevent bad, harmful data, etc. etc.
thanks
L
 		larryk author 1/9/2012

i will add this:
I want to add a form to all the public upload an image and allow marked up content (a text box the public can use html in)...
so i'm curious how much extra code/work i would need to do to secure the form.
HOPEFULLY NONE!!! <img src='https://asprunner.com/forums/file.php?topicimage=1&fieldname=reply&id=63523&image=1&table=forumreplies' class='bbc_emoticon' alt=':)' />
thanks
L
 		larryk author 1/14/2012

FYI.

i created an add page and tested against the free version of www.acunetix.com... which only tested for xss,

and it found nothing
<img src='https://asprunner.com/forums/file.php?topicimage=1&fieldname=reply&id=63677&image=1&table=forumreplies' class='bbc_emoticon' alt=':)' />
so that was good enough for me <img src='https://asprunner.com/forums/file.php?topicimage=1&fieldname=reply&id=63677&image=2&table=forumreplies' class='bbc_emoticon' alt=':)' />
although, a paid version test other type of security issues --
question? has PHPR been through any other testing/scanner software you can report on?
thanks