Laravel Blade and Web Security

Laravel Blade and Web Security

1. Blade

   • Templating engine to produce views
     • name.blade.php
       • master.blade.php
       • child.blade.php
     • Benefits
       • Template inheritance
         • @extends inherits master layout template
       • Sections
         • Can inject contents into layout's sections
           • @section - defines a section of content
           • @yield - display contents of given section
     • Control stuctures
       • if, for, while, foreach, unless
         • @CSRF - token field for CSRF protection with forms
           • Cross-Site Request Forgery
         • @method - create a hidden _method for PUT, PATCH or DELETE requests
       • display with {{ }}
         • e.g. {{ $name }}

2. Server-Side Security

   • Security considerations
     • SQL Injection
     • HTML Injection
     • Hash Password
     • Validation
       • isset(); empty(); is_integer();
     • PHP
       • Regular expressions
         • preg_match(regex, string)
         • preg_replace(regex, replacement, string)
         • preg_split(regex, string)
         • Form validation using regexes

Bilder und Dateien der Mindmap