|
@@ 202-205 (lines=4) @@
|
| 199 |
|
$exclude[] = 'submit'; |
| 200 |
|
} |
| 201 |
|
|
| 202 |
|
if($this->request->countData($exclude) !== count($config['fields'])){ |
| 203 |
|
Logger::log("Form Tampering", "User: ". Session::getUserId() ." is tampering the form with invalid number of fields", __FILE__, __LINE__); |
| 204 |
|
return false; |
| 205 |
|
} |
| 206 |
|
|
| 207 |
|
foreach($config['fields'] as $field){ |
| 208 |
|
|
|
@@ 209-212 (lines=4) @@
|
| 206 |
|
|
| 207 |
|
foreach($config['fields'] as $field){ |
| 208 |
|
|
| 209 |
|
if(!array_key_exists($field, $this->request->data)){ |
| 210 |
|
Logger::log("Form Tampering", "User: ". Session::getUserId() ." is tampering the form with invalid fields", __FILE__, __LINE__); |
| 211 |
|
return false; |
| 212 |
|
} |
| 213 |
|
} |
| 214 |
|
|
| 215 |
|
// by default, validate csrf token as well. |