• We have redone the forum. If you notice any issues or errors please open a Support Ticket under the Members dropdown and let us know.
L

Securing an Addon

  • Thread starter Thread starter Liam C.
  • Start date Start date
L

Liam C.

Guest

Hi there, I am currently creating an addon and I'm looking to try and ensure it's as secure as possible and would like to know either thoughts or suggestions on how to improve it.

I'm currently defining each route's controller with hasPermission at the start before anything else, and returning no permission. Is this a one size fits all solution? Is there any concern?

1745155322958.webp


Second, we're handling form creation. I'm aware to use <xf:form> as it has more security with it but is...

Read more

Continue reading...
 
Similar threads Most view View more
Back
Top