Title: Security related issue
Last modified: August 22, 2016

---

# Security related issue

 *  [AmmoPT](https://wordpress.org/support/users/ammopt/)
 * (@ammopt)
 * [11 years, 1 month ago](https://wordpress.org/support/topic/security-related-issue/)
 * Hello,
 * Thank you for this great plug-in. It is by far the best contact form I’ve seen
   out there. Such great UI and, my god, the documentation is amazing and I’m finding
   myself having no problem extending it to my needs.
 * Although I have an issue and it’s security related.
    I am by no means a security
   expert but I understand how basic attacks work (SQL injection, bruteforce, etc)
   and have basic knowledge on how to prevent them. After implementing my form I
   ran a security software on my whole website, and it indicated several security
   warnings wherever the form is used (I’m using only 1 form dynamically processed,
   in several places on my website).
 * These security warnings include SQL Injection, Cross Site Scripting and Shell
   Injection and they’re all related to Ninja Forms.
 * A few notes:
    1) The software may fire these warnings even if validating happens
   server-side; 2) The website does not have SSL (yet – as it is in development);
 * My question is:
 * Where and how can I enforce security on my form? I’ve seen through the filters
   and found some that are probably suitable but first wanted to ask for directions
   in case someone has sailed through these waters before.
 * Thank you.
 * [https://wordpress.org/plugins/ninja-forms/](https://wordpress.org/plugins/ninja-forms/)

Viewing 2 replies - 1 through 2 (of 2 total)

 *  Thread Starter [AmmoPT](https://wordpress.org/support/users/ammopt/)
 * (@ammopt)
 * [11 years, 1 month ago](https://wordpress.org/support/topic/security-related-issue/#post-5930144)
 * Unfourtanetly I am not able to duplicate the risks the security software is firing.
   The form seems to act as expected, not printing any error messages and bypassing
   sql injection attempts.
 * Anyone?
 *  [respectyoda](https://wordpress.org/support/users/respectyoda/)
 * (@respectyoda)
 * [11 years, 1 month ago](https://wordpress.org/support/topic/security-related-issue/#post-5930164)
 * The forms are very secure as the plugin has functions & actions to validate, 
   escape, and sanitize fields before they are processed for submission.

Viewing 2 replies - 1 through 2 (of 2 total)

The topic ‘Security related issue’ is closed to new replies.

 * ![](https://ps.w.org/ninja-forms/assets/icon-256x256.png?rev=1649747)
 * [Ninja Forms - The Contact Form Builder That Grows With You](https://wordpress.org/plugins/ninja-forms/)
 * [Frequently Asked Questions](https://wordpress.org/plugins/ninja-forms/#faq)
 * [Support Threads](https://wordpress.org/support/plugin/ninja-forms/)
 * [Active Topics](https://wordpress.org/support/plugin/ninja-forms/active/)
 * [Unresolved Topics](https://wordpress.org/support/plugin/ninja-forms/unresolved/)
 * [Reviews](https://wordpress.org/support/plugin/ninja-forms/reviews/)

 * 2 replies
 * 2 participants
 * Last reply from: [respectyoda](https://wordpress.org/support/users/respectyoda/)
 * Last activity: [11 years, 1 month ago](https://wordpress.org/support/topic/security-related-issue/#post-5930164)
 * Status: not resolved