Codeigniter : the security and the magic of hook

1. CodeIgniter
The Security & The Magic of Hook
Abdul Malik Ikhsan

2. Security Class

3. Security Class ~ CSRF Protection (1)
 Activate It

4. Security Class ~ CSRF Protection (2)

5. Security Class ~ CSRF Protection (3)

6. Security Class ~ CSRF Protection (4)
First Request
Second Request

7. Security Class ~ XSS Filtering (1)
 Activate It

8. Security Class ~ XSS Filtering (2)
 Testing…

9. Security Class ~ XSS Filtering (3)
 Dan Hasilnya…

10. Security Helper
 xss_clean()
 sanitize_filename()
 do_hash()
 strip_image_tags()
 encode_php_tags()

11. The Hook ( 1 )
 Fitur Hook memungkinkan kita
memanggil “script” pada saat
sebelum sistem flow berjalan,
sebelum action controller dipanggil,
setelah action controller dipanggil,
ataupun setelah sistem flow berjalan.

12. The Hook ( 2 )
 Enable It

13. The Hook ~ The Example ( 1 )

14. The Hook ~ The Example ( 2 )
 Tambahkan pada hooks config

15. The Hook ~ The Example ( 3 )

16. Terima Kasih

17. This presentation contained copyrighted material licensed under
various creative commons licenses unless otherwise noted:
Photos
 http://images2.wikia.nocookie.net/__cb20070120193457/uncy
 http://www.flagship-housing.co.uk/image/Help%20and%20su
References
 CodeIgniter User Guide
 http://samsonasik.wordpress.com