nayodahl / ocproject5 Goto Github PK

correct DB and its "ON DELETE CASCADE"

make signin form work

all done, but needs pager system

correct router, needs to accept more than 1 numeric character as int paramater

That said, you should:

• use enough random input for generating the session ID (see session.entropy_file, session.entropy_length, and session.hash_function)
• use HTTPS to protect the session ID during transmission
• store the session ID in a cookie and not in the URL to avoid leakage though Referer (see session.use_only_cookies)
• set the cookie with the HttpOnly and Secure attributes to forbid access via JavaScript (in case of XSS vulnerabilities) and to forbid transmission via insecure channel (see session.cookie_httponly and session.cookie_secure).

Besides that, you should also regenerate the session ID while invalidating the old one (see session_regenerate_id function) after certain session state changes (e. g. confirmation of authenticity after login or change of authorization/privileges) and you can additionally do this periodically to reduce the time span for a successful session hijacking attack.

Comments Manager view - add a column with parent Post title and a link to it

add pager for SinglePost view based on creation date instead of postId

create Http\Request class

finish all CRUD

create Edit Post view

add double check for password on signin form

Create homepage

add rule : when we delete a user that as comments, set them to anonymous author

replace router with a dynamic router

optimize router, call a controller only when needed

install bootstrap theme :
https://startbootstrap.com/previews/clean-blog/

set rule - in case a user has no more admin rights, who is the writer ?

CSRF protection on forms

refactorize RequestValidator class to keep number of methods under 10

create controll input Class to controll $_GET $_POST inside the router before calling the controller
each metho in this controll class will be static

Add template for back using twig

split backcontroller

create Superadmin Users Manager view

add rights checks before accessing to admin controller

Create Front controller

create Comments Manager view

add sql injection protection

Create Authentication system

Add template for front using twig

create add comment method

create error class to manage errors and redirect to 404 if needed

set control on manager for valid parameter
exemple = postId doesnt exist

create Posts manager view

add fluent writing for error

create Add Post view

Create Entities :
Post
Comment
User

add rights checks before accessing to members manager

add reset password method

add salt to password_hash method

create login page

install :
php-cs-fixer (en Development requirements)
whoops (en Development requirements)

create database with demo data

add mail generation for contact form

grammar, syntax, rules etc..

Create Back controller

create sign in page

create signin method with password generator with hash + salt

Create Singe Post Page