PHP框架的安全性功能

$framework->validate('username', 'name');

$framework->validate('password', 'password', ['minLength' => 8]);

echo $framework->escape($data);

$framework->enableCsrfProtection();

$framework->startSession();

$userId = $framework->getSession('userId');

$encryptedPassword = $framework->encrypt($password);

$framework->addSecurityHEADer('X-Frame-Options', 'sameorigin');

// app\HTTP\Controllers\UserController.php

namespace App\Http\Controllers;

class UserController extends Controller

{

    public function create()

    {

        $data = $this->request->all();

        $this->validate($data, [

            'name' => 'required|string|max:255',

            'email' => 'required|string|email|unique:users',

            'password' => 'required|string|min:8',

        ]);

        $user = new User($data);

        $user->password = bcrypt($user->password);

        $user->save();

        return redirect('/users');

    }

}