3
votes
Accepted
External Website Post to EE Entries
In this case, the POST submission would be rejected not due to XSS, but CSRF. It's not an appropriate API to use for continuous submission from an external source.
I haven't used Reinos' add-on, but ...
- 2,255
2
votes
Accepted
Create a channel entry via POST request
Essentially, you'll create a module with an ACT URL. (https://docs.expressionengine.com/v2/development/modules.html).
You'll have your mod.module_name.php file, which will contain your logic to ...
- 322
1
vote
Accepted
Api_channel_fields - cannot add group id
As far as I know there is no way to do this using API. I think you should try with EE Model. You can easily create new field using the Model. And Model is most effective way to handle all these core ...
- 983
1
vote
Accepted
Preventing SQL Injections
You should always scrub any user input before it gets to your query.
The first thing you should do is run and input variables through the input class.
i. e. $var = ee()->input->post('my_var', ...
- 1,987
1
vote
Accepted
Passing a GET variable back in a query while using mysqli_real_escape_string()
Use ee()->db->escape_str($event) - it's the native way to escape potentially-unsafe data in EE.
- 17.4k
Only top scored, non community-wiki answers of a minimum length are eligible