Thursday, June 14, 2007

filter.php

This is my newest solution on form submit data validation. it was developed in a "developer point of view" rather than "end user point of view". so if you don't have any idea about php development then you'll find it bit difficult to understand. but once you got to know the pattern u'll be loving it and of course you'll be using it to validate all your form submissions.

first we'll see what type of things do we have to validate as HTML form elements.
  • textfield
  • textarea
  • checkbox
  • radio button
  • radio group
  • List / Menu
  • file field
and with respect to all these fields what we should thoroughly take care of is not letting users submit any values containing <SCRIPT> tags, <STYLE> tags and any other undefined strings.

and one other cool feature of this script is that you can keep the default values of other elements even though one element fail to validate. and it may sounds like a very common and lazy task with javascript enabled pages but remember this snippet will validate and keep the default values nicely even without no javascript at all.

does that sounds interesting?

Monday, June 11, 2007

The Big Day Coming ahead on friday

ya it will be a big day for me becouse friday i have to conduct my first technical session to all my collegues at accura-tech. even though they have given me the title of software engineer im currently educating all other developers about new technologies.

so by friday evening i should prepare myself to conduct this technical session on user input validation. hopefully this will be the first in the row of web security which is one of my favourite topics.

i have already designed and checked the validation code which i will be using to demonstrate the impact.

i'll update this blog with a photo (if available) and the neccessary files once im done with this.

and i know that surely there will be lot of ideas coming in from our developers too. so i'll try to post it back to the blog.

--
Praveen Gunasekara