Special

All translations

Enter a message name below to show all available translations.

Message

Found 2 translations.

NameCurrent message text
 h English (en)All input originating from a user must be considered potentially dangerous and must be cleaned before being used.  You should always use the Joomla [[Retrieving_request_data_using_JInput|JInput]] class to retrieve data from the request, rather than the raw $_GET, $_POST or $_REQUEST variables as the [[Retrieving_request_data_using_JInput|JInput]] methods apply input filtering by default. JInput deals with all aspects of the user request in a way that is independent of the request method used.  It can also be used to retrieve cookie data and even server and environment variables. However, it is important to use the correct [[Retrieving_request_data_using_JInput|JInput]] method to ensure maximum security.  It is very easy to just use the [[Retrieving_request_data_using_JInput#Getting_Values|JInput->get]] method with default parameters and ignore the fact that in many cases it is possible to apply a more stringent requirement on user input.
 h Chinese (Taiwan) (zh-tw)所有來自使用者發起的輸入都必須要被視為具有潛在危險的,並且必須要在使用前先做過清理。您應該總是使用 Joomla [[Retrieving_request_data_using_JInput|JInput]] class 來從請求擷取資料,而不是赤裸裸的  <code>$_GET</code>, <code>$_POST</code> 或是 <code>$_REQUEST</code> 變項,因為 <code> JInput </code> method 預設會過濾用戶的輸入。<code> JInput </code> 會處理所有方面的用戶請求,讓它獨立於使用的 request method。<code> JInput </code> 也可以用於獲取 cookie資料,甚至是伺服器和環境變數。然而,非常重要的是,使用正確的[[Retrieving_request_data_using_JInput|JInput]] method,來確保最大的安全性。使用<code> [[Retrieving_request_data_using_JInput#Getting_Values|JInput->get]] </code> method ,輔以預設參數是十分容易的,儘管在很多案例中,還可以對使用者的輸入套用更加嚴格的規範。