Documentation Support > Developers > ZAPSecure
Format: function ZAPsecure()
Explanation: This function is called one time at the beginning of each ZAP form submission to authenticate it was genuinely submitted form a wiki page.
While not perfect, this function:
1) Checks to make sure passwords are enabled for ZAP form submissions.
2) ZAPkey is retrieved from a POST or GET value, and used to determine if the appropriate session variable is set. If not, processing stops.
3) $ZAParray is set to the appropriate SESSION variable array (with values set by ZAP Input markups), and then all ZAP SESSION values are unset.
4) POST values are transformed into CSV lists if an array, stripmagic is run on each field to avoid slases, and then the POST values are appended to $ZAParray. POST values will not overwrite existing $ZAParray variables.
5) Field replacements are done on every field in the $ZAParray.
6) $ZAParray is then returned to the Engine, ready for processing.