SlideShare a Scribd company logo
CodeIgniter
       The Security & The Magic of Hook




                   Abdul Malik Ikhsan
Security Class
Security Class ~ CSRF Protection (1)
 Activate It
Security Class ~ CSRF Protection (2)
Security Class ~ CSRF Protection (3)
Security Class ~ CSRF Protection (4)


                                  First Request




                           Second Request
Security Class ~ XSS Filtering (1)
 Activate It
Security Class ~ XSS Filtering (2)
 Testing…
Security Class ~ XSS Filtering (3)
 Dan Hasilnya…
Security Helper
   xss_clean()
   sanitize_filename()
   do_hash()
   strip_image_tags()
   encode_php_tags()
The Hook ( 1 )
 Fitur Hook memungkinkan kita
  memanggil “script” pada saat
  sebelum sistem flow berjalan,
  sebelum action controller dipanggil,
  setelah action controller dipanggil,
  ataupun setelah sistem flow berjalan.
The Hook ( 2 )
 Enable It
The Hook ~ The Example ( 1 )
The Hook ~ The Example ( 2 )
 Tambahkan pada hooks config
The Hook ~ The Example ( 3 )
Terima Kasih
This presentation contained copyrighted material licensed under
various creative commons licenses unless otherwise noted:


Photos
 http://images2.wikia.nocookie.net/__cb20070120193457/uncy
 http://www.flagship-housing.co.uk/image/Help%20and%20su



References
 CodeIgniter User Guide
 http://samsonasik.wordpress.com

More Related Content

Codeigniter : the security and the magic of hook

  • 1. CodeIgniter The Security & The Magic of Hook Abdul Malik Ikhsan
  • 3. Security Class ~ CSRF Protection (1)  Activate It
  • 4. Security Class ~ CSRF Protection (2)
  • 5. Security Class ~ CSRF Protection (3)
  • 6. Security Class ~ CSRF Protection (4) First Request Second Request
  • 7. Security Class ~ XSS Filtering (1)  Activate It
  • 8. Security Class ~ XSS Filtering (2)  Testing…
  • 9. Security Class ~ XSS Filtering (3)  Dan Hasilnya…
  • 10. Security Helper  xss_clean()  sanitize_filename()  do_hash()  strip_image_tags()  encode_php_tags()
  • 11. The Hook ( 1 )  Fitur Hook memungkinkan kita memanggil “script” pada saat sebelum sistem flow berjalan, sebelum action controller dipanggil, setelah action controller dipanggil, ataupun setelah sistem flow berjalan.
  • 12. The Hook ( 2 )  Enable It
  • 13. The Hook ~ The Example ( 1 )
  • 14. The Hook ~ The Example ( 2 )  Tambahkan pada hooks config
  • 15. The Hook ~ The Example ( 3 )
  • 17. This presentation contained copyrighted material licensed under various creative commons licenses unless otherwise noted: Photos  http://images2.wikia.nocookie.net/__cb20070120193457/uncy  http://www.flagship-housing.co.uk/image/Help%20and%20su References  CodeIgniter User Guide  http://samsonasik.wordpress.com