This page is still a beta!

  Table Of Content 1.2.Screenshots

Chapter 1. wt_doorman

Extension Key: wt_doorman

Copyright 2005-2009,

Alex Kellner,

<Alexander.Kellner@einpraegsam.net>

This document is published under the Open Content License

available from http://www.opencontent.org/opl.shtml

The content of this document is related to TYPO3

- a GNU/GPL CMS/Framework available from www.typo3.com

1.1. wt_doorman introduction

What does it do?

  1. You can secure the whole TYPO3 installation with filtering of GET and POST params.

  2. Developers can include the class to filter values of there process

What is the process?

Doorman is a small php class which provides an easy cleaning method of piVars against bad behaviour like XSS (Cross Site Scripting) and SQL injection, etc...).

Just include the class.tx_wtdoorman_security.php and send your piVars to this class. You'll get a filtered variant of your piVars.

You can set what a GET or POST param should contain (integer, alphanum, text or a defined value).

See below for integration example.

NOTE: wt_doorman uses a newer removeXSS class as offered in the current TYPO3 4.2

Who can use wt_doorman?

  1. Admins can secure the whole TYPO3 installation against bad code from GET or POST vars

  2. Developers can secure there extension with filtering of piVars