green Comments - Answer Overflow

green

Posts Comments

KPCKevin Powell - Community

•Created by snxxwyy on 3/29/2024 in #front-end

!important use case

good thinking :), youre welcome! thanks a lot! you too :)

7 replies

KPCKevin Powell - Community

•Created by snxxwyy on 3/29/2024 in #front-end

!important use case

i still have a lot to learn but in this case i would use it, yes. if feel like if you end up using !important multiple times for roughly the same thing it would get complicated indeed, but in your current scenario it will only be used once for this specific thing

7 replies

KPCKevin Powell - Community

•Created by snxxwyy on 3/29/2024 in #front-end

!important use case

yess, !important should do the trick

display: none !important;

display: none !important;

7 replies

KPCKevin Powell - Community

•Created by MD on 3/29/2024 in #back-end

Handling sessions with php question

only im not sure if it completely eliminates the risk of an xss attack or if there are better alternatives

15 replies

KPCKevin Powell - Community

•Created by MD on 3/29/2024 in #back-end

Handling sessions with php question

technically yes, since its visible and editable in the inspector tool, but if someone changes the value it wont be equal to the value in the session

15 replies

KPCKevin Powell - Community

•Created by MD on 3/29/2024 in #back-end

Handling sessions with php question

im afraid i cant answer your session question, but i'd like to point out something related to the form. i am taught to use a csrf token in forms like this. a csrf token is a token that can improve security against cross site script (xss) attacks. its used to check if the form that has been sent to your validate page comes from your login page. on the login page you add something like this. you start a session, create a unique token and add it to the session

    <?php
        session_start();
        $token = uniqid();
        $_SESSION['token']= $token;
    ?>

    <?php
        session_start();
        $token = uniqid();
        $_SESSION['token']= $token;
    ?>

and in the form you add an hidden input that contains the token as value

  <input type="hidden" name="csrf-token" value="<?php echo $token;?>">

  <input type="hidden" name="csrf-token" value="<?php echo $token;?>">

on your validation page you compare the token value from your session with the token value from the hidden input. if its the same, you are certain that the form came from your login page

  session_start();
  if(isset($_SESSION["token"]) && $_SESSION["token"] == $_POST["csrf-token"]){};

  session_start();
  if(isset($_SESSION["token"]) && $_SESSION["token"] == $_POST["csrf-token"]){};

hope this helps :)

15 replies

KPCKevin Powell - Community

•Created by Joni on 3/29/2024 in #front-end

Proper Navbar

i was just wondering about what the difference would be haha, didnt know there was a padding version of it as well. thanks!

7 replies

KPCKevin Powell - Community

•Created by Joni on 3/29/2024 in #front-end

Proper Navbar

i dont know if this is the best solution but you can add scroll-margin-top: (headerheight); to the sections

7 replies

KPCKevin Powell - Community

•Created by I am Groot on 3/13/2024 in #front-end

HTML question --vscode <header"> added the quote mark, and breaks when removed

possible that there is a quote missing in your code somewhere?

12 replies

KPCKevin Powell - Community