SlideShare a Scribd company logo
CodeIgniter
       The Security & The Magic of Hook




                   Abdul Malik Ikhsan
Security Class
Security Class ~ CSRF Protection (1)
 Activate It
Security Class ~ CSRF Protection (2)
Security Class ~ CSRF Protection (3)
Security Class ~ CSRF Protection (4)


                                  First Request




                           Second Request
Security Class ~ XSS Filtering (1)
 Activate It
Security Class ~ XSS Filtering (2)
 Testing…
Security Class ~ XSS Filtering (3)
 Dan Hasilnya…
Security Helper
   xss_clean()
   sanitize_filename()
   do_hash()
   strip_image_tags()
   encode_php_tags()
The Hook ( 1 )
 Fitur Hook memungkinkan kita
  memanggil “script” pada saat
  sebelum sistem flow berjalan,
  sebelum action controller dipanggil,
  setelah action controller dipanggil,
  ataupun setelah sistem flow berjalan.
The Hook ( 2 )
 Enable It
The Hook ~ The Example ( 1 )
The Hook ~ The Example ( 2 )
 Tambahkan pada hooks config
The Hook ~ The Example ( 3 )
Terima Kasih
This presentation contained copyrighted material licensed under
various creative commons licenses unless otherwise noted:


Photos
 http://images2.wikia.nocookie.net/__cb20070120193457/uncy
 http://www.flagship-housing.co.uk/image/Help%20and%20su



References
 CodeIgniter User Guide
 http://samsonasik.wordpress.com

More Related Content

DOC
Appsdba interview question
PDF
Ubuntu 9.10 Party Tainan - small talk
PDF
Codeigniter : Custom Routing - Manipulate Uri
PDF
Codeigniter : Using Third Party Components - Zend Framework Components
PPSX
CodeIgniter L3 model & active record & template
PPTX
CodeIgniter & MVC
PPTX
I Love codeigniter, You?
PDF
Code igniter parameter passing techniques
Appsdba interview question
Ubuntu 9.10 Party Tainan - small talk
Codeigniter : Custom Routing - Manipulate Uri
Codeigniter : Using Third Party Components - Zend Framework Components
CodeIgniter L3 model & active record & template
CodeIgniter & MVC
I Love codeigniter, You?
Code igniter parameter passing techniques

Viewers also liked (20)

PDF
[2007 CodeEngn Conference 01] dual5651 - Windows 커널단의 후킹
KEY
Theme API
PPTX
Momchil Kyurkchiev Presentation
PDF
Codeigniter : Two Step View - Concept Implementation
PPT
DB design
PDF
2014 database - course 3 - PHP and MySQL
PPT
Codeigniter
PDF
CodeIgniter - PHP MVC Framework by silicongulf.com
PPTX
REST API Best Practices & Implementing in Codeigniter
PPT
Week 3 database design
PPTX
Modular PHP Development using CodeIgniter Bonfire
PPTX
CodeIgniter 101 Tutorial
PDF
Zend Framework 2 : Dependency Injection
PPT
Introduction To CodeIgniter
PDF
Introduce to Linux command line
PDF
Dynamic Linker
PDF
Functions, Roles and Duties of Police in General
PDF
Rootkit 101
ODP
CodeIgniter PHP MVC Framework
PPTX
Database design process
[2007 CodeEngn Conference 01] dual5651 - Windows 커널단의 후킹
Theme API
Momchil Kyurkchiev Presentation
Codeigniter : Two Step View - Concept Implementation
DB design
2014 database - course 3 - PHP and MySQL
Codeigniter
CodeIgniter - PHP MVC Framework by silicongulf.com
REST API Best Practices & Implementing in Codeigniter
Week 3 database design
Modular PHP Development using CodeIgniter Bonfire
CodeIgniter 101 Tutorial
Zend Framework 2 : Dependency Injection
Introduction To CodeIgniter
Introduce to Linux command line
Dynamic Linker
Functions, Roles and Duties of Police in General
Rootkit 101
CodeIgniter PHP MVC Framework
Database design process
Ad

Recently uploaded (20)

PPTX
Spectroscopy.pptx food analysis technology
PDF
Build a system with the filesystem maintained by OSTree @ COSCUP 2025
PDF
Encapsulation theory and applications.pdf
PDF
Mobile App Security Testing_ A Comprehensive Guide.pdf
PDF
Peak of Data & AI Encore- AI for Metadata and Smarter Workflows
PDF
Encapsulation_ Review paper, used for researhc scholars
PDF
Review of recent advances in non-invasive hemoglobin estimation
PDF
Agricultural_Statistics_at_a_Glance_2022_0.pdf
PPTX
Digital-Transformation-Roadmap-for-Companies.pptx
PDF
Blue Purple Modern Animated Computer Science Presentation.pdf.pdf
PPTX
ACSFv1EN-58255 AWS Academy Cloud Security Foundations.pptx
PPTX
Cloud computing and distributed systems.
PPTX
Programs and apps: productivity, graphics, security and other tools
PPTX
VMware vSphere Foundation How to Sell Presentation-Ver1.4-2-14-2024.pptx
PPT
“AI and Expert System Decision Support & Business Intelligence Systems”
PDF
Architecting across the Boundaries of two Complex Domains - Healthcare & Tech...
PPTX
Effective Security Operations Center (SOC) A Modern, Strategic, and Threat-In...
PDF
Profit Center Accounting in SAP S/4HANA, S4F28 Col11
PDF
Advanced methodologies resolving dimensionality complications for autism neur...
DOCX
The AUB Centre for AI in Media Proposal.docx
Spectroscopy.pptx food analysis technology
Build a system with the filesystem maintained by OSTree @ COSCUP 2025
Encapsulation theory and applications.pdf
Mobile App Security Testing_ A Comprehensive Guide.pdf
Peak of Data & AI Encore- AI for Metadata and Smarter Workflows
Encapsulation_ Review paper, used for researhc scholars
Review of recent advances in non-invasive hemoglobin estimation
Agricultural_Statistics_at_a_Glance_2022_0.pdf
Digital-Transformation-Roadmap-for-Companies.pptx
Blue Purple Modern Animated Computer Science Presentation.pdf.pdf
ACSFv1EN-58255 AWS Academy Cloud Security Foundations.pptx
Cloud computing and distributed systems.
Programs and apps: productivity, graphics, security and other tools
VMware vSphere Foundation How to Sell Presentation-Ver1.4-2-14-2024.pptx
“AI and Expert System Decision Support & Business Intelligence Systems”
Architecting across the Boundaries of two Complex Domains - Healthcare & Tech...
Effective Security Operations Center (SOC) A Modern, Strategic, and Threat-In...
Profit Center Accounting in SAP S/4HANA, S4F28 Col11
Advanced methodologies resolving dimensionality complications for autism neur...
The AUB Centre for AI in Media Proposal.docx
Ad

Codeigniter : the security and the magic of hook

  • 1. CodeIgniter The Security & The Magic of Hook Abdul Malik Ikhsan
  • 3. Security Class ~ CSRF Protection (1)  Activate It
  • 4. Security Class ~ CSRF Protection (2)
  • 5. Security Class ~ CSRF Protection (3)
  • 6. Security Class ~ CSRF Protection (4) First Request Second Request
  • 7. Security Class ~ XSS Filtering (1)  Activate It
  • 8. Security Class ~ XSS Filtering (2)  Testing…
  • 9. Security Class ~ XSS Filtering (3)  Dan Hasilnya…
  • 10. Security Helper  xss_clean()  sanitize_filename()  do_hash()  strip_image_tags()  encode_php_tags()
  • 11. The Hook ( 1 )  Fitur Hook memungkinkan kita memanggil “script” pada saat sebelum sistem flow berjalan, sebelum action controller dipanggil, setelah action controller dipanggil, ataupun setelah sistem flow berjalan.
  • 12. The Hook ( 2 )  Enable It
  • 13. The Hook ~ The Example ( 1 )
  • 14. The Hook ~ The Example ( 2 )  Tambahkan pada hooks config
  • 15. The Hook ~ The Example ( 3 )
  • 17. This presentation contained copyrighted material licensed under various creative commons licenses unless otherwise noted: Photos  http://images2.wikia.nocookie.net/__cb20070120193457/uncy  http://www.flagship-housing.co.uk/image/Help%20and%20su References  CodeIgniter User Guide  http://samsonasik.wordpress.com