Re: Cross Site Scripting
| From: | Chris Shiflett | Date: | Fri, 07 Nov 2003 15:00:51 +0000 |
| Subject: | Re: Cross Site Scripting | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-168851@lists.php.net to get a copy of this message | ||
--- Shaun <shaun@mania.plus.com> wrote:
> Is there a way to filter metacharacters from all $_POST values sent from
> pages on my site in an effort to eliminate the majority of XSS attacks?
Yes, but it's probably more important that you understand what XSS is and
what methods people use to protect against such attacks.
You can download a free article on the topic here:
http://www.phparch.com/sample.php?mid=16
Hope that helps.
Chris
=====
My Blog
http://shiflett.org/
HTTP Developer's Handbook
http://httphandbook.org/
RAMP Training Courses
http://www.nyphp.org/ramp