@@ 187-190 (lines=4) @@ | ||
184 | $exclude[] = 'submit'; |
|
185 | } |
|
186 | ||
187 | if($this->request->countData($exclude) !== count($config['fields'])){ |
|
188 | Logger::log("Form Tampering", "User: ". Session::getUserId() ." is tampering the form with invalid number of fields", __FILE__, __LINE__); |
|
189 | return false; |
|
190 | } |
|
191 | ||
192 | foreach($config['fields'] as $field){ |
|
193 | ||
@@ 194-197 (lines=4) @@ | ||
191 | ||
192 | foreach($config['fields'] as $field){ |
|
193 | ||
194 | if(!array_key_exists($field, $this->request->data)){ |
|
195 | Logger::log("Form Tampering", "User: ". Session::getUserId() ." is tampering the form with invalid fields", __FILE__, __LINE__); |
|
196 | return false; |
|
197 | } |
|
198 | } |
|
199 | ||
200 | // by default, validate csrf token as well. |