-
Recently Browsing 0 members
No registered users viewing this page.
-
Similar Content
-
-
By VeiJari
Hello forum, this is my first security related post, so I'm a bit of a newbie.
I understand that when I have direct front-input from user I should sanitize the input, but how about when I use a secret key for showing a API for a third-party supplier? Should I sanitize the input->get() key?
I've tested this issue and I tried ?key=<?php echo $page->field; ?> And without adding any sanitization it comes back: /?key=<?php%20echo%20$page->field;%20?>
So can I rely on this, or should I still use $sanitizer just in case?
Thanks for the help!
-
By EyeDentify
I have been experimenting with the new $page->meta() method and find it useful.
Once i figured out that the data i "save" with it is tied to the page where i called the method from.
So this is not obvious at least not for me in the documentation:
https://processwire.com/api/ref/page/meta/
So i just wanted to share that revelation with the community so you don´t get as confused as i was.
Happy Coding Everyone.
-
By louisstephens
Going through my long quest to get better with ajax and utilizing the api, I have hit yet another roadblock. I currently have a form with an image field (thanks to flydev for getting that sorted), "title" text input, and a select field set to multiple. In my ajax call, I added in:
tags = $("#select-tags").val(); form_data.append('tags', tags); $.ajax({ type: 'POST', data: form_data, contentType: false, processData: false, url: '/ajax/upload-preview/', success: function(data) { console.log("Woo"); }, error: function(xhr, ajaxOptions, thrownError) { alert(xhr.responseText); } }); And in the ajax template:
$tags = $sanitizer->text($_POST['tags']); $image = $sanitizer->text($_POST['image']); $p = new Page(); $p->template = "preview"; $p->parent = $pages->get("/previews/"); $p->name = $title; $p->title = $title; $p->tags = $tags; $p->save(); If I select a "tag" from the select input and submit, it does indeed add it to the Page Reference field in the backend. However, this does not work with an array being passed to it of multiple options.
So it does appear that my ajax call is trying to submit multiple options, but I am really just unsure how to get these two added in. I saw in other forums posts of add($page) and even add(array()). Do I need to handle this js array differently or do I need to foreach through the $tags to add it like:
foreach($tags as $tag) { $p->tags->add($tag); $p->save(); } I tried this approach, but apparently I am still missing something.
Edit:
I was doing some tweaking, and I know I can split the js array out like:
for (i = 0, len = tags.length; i < len; i++) { console.log(tags[i]); } However, I am not sure then how to handle the POST in php if I were to split it out.
-
By HerzBlut
Hello,
I'm looking for a developer to write me an extension for "https://modules.processwire.com/modules/process-graph-ql/". It's about Custom Fields (Repeater and Pro Repeater Matrix). So that I can connect and read them via GraphQL with React. It must be possible to read the different fields of the matrix and get their type (e.g. news, slider, blog etc.).
If you are interested just leave Skype or e-mail. I am looking forward to possible inquiries
-