Part of the EllisLab Network
   
2 of 2
2
CSRF Vulnerabilities and Code Igniter plugin
Posted: 23 January 2009 09:03 PM   [ Ignore ]   [ # 16 ]  
Research Assistant
Avatar
RankRankRank
Total Posts:  467
Joined  01-17-2008

i see that this was posted in sept. has this been patched in the 1.7 version of CI?

 Signature 

aka trs21219
CodeSanity | Github | LinkedIn | Facebook | Twitter | Last.fm

Profile
 
 
Posted: 25 January 2009 02:39 PM   [ Ignore ]   [ # 17 ]  
Lab Assistant
RankRank
Total Posts:  258
Joined  12-19-2008

trs21219,
I’m not sure which post you are referring to.  The reason I “cleaned up” the CSRF code in my copy was because the author uses the convention of NOT closing the function brackets, which is legal in php, if there is another function call or the end of the file following the ‘missing’ bracket.  I don’t subscribe to this practice as it slightly more difficult to read.

  If you are referring to the date of the first post in this thread, I don’t think there has been an update.  I downloaded my copy two days ago and have installed it.  Whether it works or not remains to be tested, pending the rest of my coding.  Perhaps someone else can address the previous poster’s request for changes?

 Signature 

CI 2.1.0, Linux, LAMP. We also like Gold and Silver…
Find me on Freelancer.com
Verbosity does not imply erudition,
Emphasis is no guarantee of veracity.
User Guide? Nobody told me there was a User Guide!

Profile
 
 
Posted: 08 February 2009 11:44 PM   [ Ignore ]   [ # 18 ]  
Summer Student
Total Posts:  3
Joined  05-15-2004

TWP Marketing: I definitely do not use the convention of not closing function brackets, although this may have happened unintentionally. Can you point me to the unclosed bracket?

Profile
 
 
Posted: 09 February 2009 02:27 PM   [ Ignore ]   [ # 19 ]  
Lab Assistant
RankRank
Total Posts:  258
Joined  12-19-2008

Bill, Sorry for the confusion, it is on my part.  When I “cleaned up” the code, I also re-tabbed the formatting to suit my taste and I think I removed your closing brackets, probably because I missed the fact that the final function was outside the class declaration.  Again, it was my mistake, not yours, your code is fine.
TWP

 Signature 

CI 2.1.0, Linux, LAMP. We also like Gold and Silver…
Find me on Freelancer.com
Verbosity does not imply erudition,
Emphasis is no guarantee of veracity.
User Guide? Nobody told me there was a User Guide!

Profile
 
 
Posted: 16 March 2009 07:43 PM   [ Ignore ]   [ # 20 ]  
Summer Student
Total Posts:  26
Joined  11-09-2007

Thanks a lots
That’s what i am looking for.
work great!

btw, how can i test my site to ensure it is 100%? working?

Thanks

Profile
 
 
Posted: 16 March 2009 09:29 PM   [ Ignore ]   [ # 21 ]  
Lab Technician
RankRankRankRank
Total Posts:  1264
Joined  04-19-2008

go to your browser and browse it?

 Signature 

PinoyTech - Web Development Blog

Profile
 
 
   
2 of 2
2