Most problems and vulnerabilities in softwares are caused by incorrect handling of external files or data, or the form variables.
During the Bitrix Site Manager software development, a system of external variables and files handling was developed.
The Bitrix Site Manager implements functions used to prepare variables and ensure their safety for use with SQL queries and functional modules.
Special CFile class implements methods ensuring the secured file handling, which provides for obtaining files from users.
In the view of security, such integration of the key areas of the code allow to develop secured web applications with minimal effort.
