New answers tagged


On the SQL side, data inserted using JDatabaseDriver::insertObject() and JDatabaseDriver::updateObject() methods is escaped automatically. On HTML side, you should filter user input to prevent XSS. Normally, Joomla\CMS\Component\ComponentHelper::filterText() is used to filter content where HTML is allowed. These filters can be configured per user group in ...

Top 50 recent answers are included