security

This page relates to the Skill sets described in the open curriculum project, and tries to describe one of the skill sets. See this page as a collaborative notebook, and feel free to edit and improve it.

Someone with Writing secure code skills:

• knows how to handle user input securely (using check_plain() and t(), using filter_xss(), using filter_xss_admin(), ...)
• knows how to handle URLs securely
• is able to make queries secure against SQL Injection by using the database API: e.g. db_query(), adding the node_access tag