RSS Feed/News Securing an Addon

Status
Not open for further replies.

ENXF NET

Administrator
Staff member
Administrator
Moderator
+Lifetime VIP+
S.V.I.P.S Member
S.V.I.P Member
V.I.P Member
Collaborate
Registered
Joined
Nov 13, 2018
Messages
27,310
Points
823

Reputation:

Hi there, I am currently creating an addon and I'm looking to try and ensure it's as secure as possible and would like to know either thoughts or suggestions on how to improve it.

I'm currently defining each route's controller with hasPermission at the start before anything else, and returning no permission. Is this a one size fits all solution? Is there any concern?

1745155322958.webp

Second, we're handling form creation. I'm aware to use <xf:form> as it has more security with it but is...

Read more

Continue reading...
 
Status
Not open for further replies.
Top