security-thread.md

Writing Secure Themes - Hints, Tips

Validation

• use whitelisting as method to get valid settings, like radio button for a control not open text

Qualifying data

• is_int()
• filter_input() - choose the right qualification, FILTER_VALIDATE_URL for a valide URL
• ...

Helpful links

• A Guide to Writing Secure Themes – Part 1: Introduction
• A Guide to Writing Secure Themes – Part 2: Validation