Security


A handful of security-related helper methods. Including random password generation, htpasswd-style password protection, and verifying ip ranges.

protect()

Create an HTTP-AUTH dialog with the specified user and password.

Important! This will not work properly if PHP is running in CGI mode. You can try this solution in this case.

@param string $user The user-name required by the dialog.
@param string $password The password required by the dialog.
@param string $realm The realm is a string which specifies which area this access includes. Search google for HTTP AUTH for more details.
@param string $message This message is displayed if the user fails to input the correct user/password.
@return bool Returns true if successful authentication, exits otherwise.

random_password()

Generate a random password of a specified length.

@param integer $length The length of the password. 10 by default.
@return string The generated password.

cors()

Uses CORS to allows ajax requests from cross-domain origins. Sends headers so it must be called before any output. See here for IE issues.

@param string $allow_origin The domain to allow, or * to whitelist everything. Defaults to *.
@param string $allow_methods Allow the method by which to send data. List comma-separated. Defaults to POST, GET, OPTIONS.

has_xss()

Check code for cross-site scripting vulnerabilities (XSS). Return boolean true if code contains potential XSS (script tags, etc.) and returns false if code is clean.

@param string $string The string to run XSS detection logic on.
@return boolean True if the given string contains XSS, false if clean.

ip_in_range()

Checks if an IP address is within the specified range.

Network ranges can be specified as:
1. Wildcard format: 1.2.3.*
2. CIDR format: 1.2.3/24 OR 1.2.3.4/255.255.255.0
3. Start-End IP format: 1.2.3.0-1.2.3.255

The function will return true if the supplied IP is within the range.

@param string|boolean $ip The ip address to check or an array of IP addresses to check. If set to false, my current IP will be used.
@param string $range The ip address range to check in.
@return boolean Will return true if the specified IP is within the given range.

Outlast Web & Mobile Development (c) 2018 | Privacy Policy |