Security is very important to concrete5.
As a developer who uses concete5 to build web applications, you'll need to ensure that your code is secure. Fortunately, concrete5 contains a number of helper libraries and functions to ensure writing secure code is possible and easy to do.
- Protect Against Cross-Site Request Forgery with the Token Validation Library.
- Protect Against Cross-Site-Scripting with Output Filtering and Sanitization.
- Use concrete API or doctrine placeholders to guard against SQL injection.
- Validate file uploads.
- Sanitize user inputs.
- Encrypt sensitive data.
- Use Anti-spam & Captcha in public forms.