SQL Injection / XSS - Security Features

General
1

Hi,
I just need to know if hivepress forms are getting sanitise, parameterised and verified on submission to prevent SQL injection or XSS attacks.

And what about uploaded files? Is there already a system to verify their validity to avoid malicious file upload?

Thanks a lot in advance.
Emilio

4

Hi,

Yes, If you use our API forms or custom attributes, sanitizing and escaping are already included Fields - Developer Docs
For our part, we try to follow the best practices, and WordPress also prevents such attacks at its level. Also, please note that our code is open source on GitHub, so you can review it in more detail hivepress (HivePress) · GitHub

​I hope this is helpful to you.

2 Likes
5

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.