|
@@ 187-190 (lines=4) @@
|
| 184 |
|
$exclude[] = 'submit'; |
| 185 |
|
} |
| 186 |
|
|
| 187 |
|
if($this->request->countData($exclude) !== count($config['fields'])){ |
| 188 |
|
Logger::log("Form Tampering", "User: ". Session::getUserId() ." is tampering the form with invalid number of fields", __FILE__, __LINE__); |
| 189 |
|
return false; |
| 190 |
|
} |
| 191 |
|
|
| 192 |
|
foreach($config['fields'] as $field){ |
| 193 |
|
|
|
@@ 194-197 (lines=4) @@
|
| 191 |
|
|
| 192 |
|
foreach($config['fields'] as $field){ |
| 193 |
|
|
| 194 |
|
if(!array_key_exists($field, $this->request->data)){ |
| 195 |
|
Logger::log("Form Tampering", "User: ". Session::getUserId() ." is tampering the form with invalid fields", __FILE__, __LINE__); |
| 196 |
|
return false; |
| 197 |
|
} |
| 198 |
|
} |
| 199 |
|
|
| 200 |
|
// by default, validate csrf token as well. |