Re: Cross Site Scripting
| From: | Burhan Khalid | Date: | Fri, 07 Nov 2003 10:15:38 +0000 |
| Subject: | Re: Cross Site Scripting | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-168818@lists.php.net to get a copy of this message | ||
Shaun wrote:
Hi, Is there a way to filter metacharacters from all $_POST values sent from pages on my site in an effort to eliminate the majority of XSS attacks?htmlentities() preg_match_all() -- Burhan Khalid phplist[at]meidomus[dot]com http://www.meidomus.com ----------------------- "Documentation is like sex: when it is good, it is very, very good; and when it is bad, it is better than nothing."