@@ 202-205 (lines=4) @@ | ||
199 | $exclude[] = 'submit'; |
|
200 | } |
|
201 | ||
202 | if($this->request->countData($exclude) !== count($config['fields'])){ |
|
203 | Logger::log("Form Tampering", "User: ". Session::getUserId() ." is tampering the form with invalid number of fields", __FILE__, __LINE__); |
|
204 | return false; |
|
205 | } |
|
206 | ||
207 | foreach($config['fields'] as $field){ |
|
208 | ||
@@ 209-212 (lines=4) @@ | ||
206 | ||
207 | foreach($config['fields'] as $field){ |
|
208 | ||
209 | if(!array_key_exists($field, $this->request->data)){ |
|
210 | Logger::log("Form Tampering", "User: ". Session::getUserId() ." is tampering the form with invalid fields", __FILE__, __LINE__); |
|
211 | return false; |
|
212 | } |
|
213 | } |
|
214 | ||
215 | // by default, validate csrf token as well. |