Issues

• Sanitize the HTML of editor() on the server (XSS)

  enhancementsecurity
  tombrain/FormHandler#22 · Filter by author tombrain opened on Oct 24, 2026

• View mode prints field values without escaping (XSS)

  bugsecurity
  tombrain/FormHandler#21 · Filter by author tombrain opened on Oct 24, 2026

• Remove test code, duplicate and wrongly public methods from FormHandler

  enhancement
  tombrain/FormHandler#20 · Filter by author tombrain opened on Oct 23, 2026

• Cleanup: outdated links, package name and commented-out tests

  good first issue
  tombrain/FormHandler#19 · Filter by author tombrain opened on Oct 23, 2026

• Release 4.0.0

  tombrain/FormHandler#18 · Filter by author tombrain opened on Oct 23, 2026

• Chinese language file zh-hans-utf8.php is corrupted

  bug
  tombrain/FormHandler#17 · Filter by author tombrain opened on Oct 23, 2026

• Replace trigger_error(E_USER_ERROR), deprecated since PHP 8.4

  enhancement
  tombrain/FormHandler#16 · Filter by author tombrain opened on Oct 23, 2026

• Use prepared statements in dbFormHandler

  enhancementsecurity
  tombrain/FormHandler#15 · Filter by author tombrain opened on Oct 23, 2026

• Option fields accept values that are not options

  bugsecurity
  tombrain/FormHandler#14 · Filter by author tombrain opened on Oct 23, 2026

• Replace the outdated bundled libraries (CKEditor 4.3.1, jQuery 1.4.2, securimage)

  enhancementsecurity
  tombrain/FormHandler#13 · Filter by author tombrain opened on Oct 23, 2026

• Add CSRF protection to forms

  enhancementsecurity
  tombrain/FormHandler#12 · Filter by author tombrain opened on Oct 23, 2026

• File manager connector is enabled without login and accepts any folder

  bugsecurity
  tombrain/FormHandler#11 · Filter by author tombrain opened on Oct 23, 2026

• checkBox() should work with keys if 'useArrayKeyAsValue' is enabled

  enhancement
  tombrain/FormHandler#6 · Filter by author tombrain opened on Apr 11, 2020

• Getter for member $_name

  enhancement
  tombrain/FormHandler#5 · Filter by author tombrain opened on Apr 10, 2020

• Checkbox: getValue() delivers any posted value

  bug
  tombrain/FormHandler#4 · Filter by author tombrain opened on Apr 9, 2020
  1

• Empty PassField clears databasevalue

  bug
  tombrain/FormHandler#3 · Filter by author tombrain opened on Apr 6, 2020
  1