Where are the Joomla / Drupal input validation scripts located?

Question

我想看看Joomla / Drupal如何进行验证/安全性，输入验证脚本位于何处？

Answer 1

Drupal: http://api.drupal.org/api/drupal/modules--user--user.module/6

Joomla: http://api.joomla.org/Joomla-Framework/User/_joomla---user---authentication.php.html

Answer 2

There isn't a single/central validation code for user's input in Drupal. Each form as it own validations handlers, search for _validate in the Drupal API . In addition, there is some re-usable validation functions such as valid_url() and valid_email_address() . Drupal also encourage output sanitization with functions such as t() , check_plain() or filter_xss() . Drupal discourage bad-practive regarding SQL injection by favoring placeholders in query string, see db_query() .