Re: security in guest book and user forums
| From: | Jason Wong | Date: | Sat, 04 Jan 2003 19:56:04 +0000 |
| Subject: | Re: security in guest book and user forums | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-130254@lists.php.net to get a copy of this message | ||
On Sunday 05 January 2003 01:16, Anders Thoresson wrote:
> I've seen both guest books and user forums "hacked" by users who enter
> javascript or other code, and that way redirects vistors to other sites or
> do other unwelcome things. What expressions should I look for and not allow
> in my forms?
Disallow all HTML tags by using strip_tags().
--
Jason Wong -> Gremlins Associates -> www.gremlins.biz
Open Source Software Systems Integrators
* Web Design & Hosting * Internet & Intranet Applications Development *
/*
"A dirty mind is a joy forever."
-- Randy Kunkee
*/