Re[2]: [PHP] transformation to htm file when downloaded
| From: | Richard Davey | Date: | Thu, 15 Apr 2004 15:52:52 +0000 |
| Subject: | Re[2]: [PHP] transformation to htm file when downloaded | ||
| References: | 1 2 3 4 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-183477@lists.php.net to get a copy of this message | ||
Hello Gabino,
Thursday, April 15, 2004, 4:36:48 PM, you wrote:
GT> Thanks for the quick response. I'm thinking of adding a check for the string
GT> length, so someone doesn't copy and paste a dictionary into my guestbook,
GT> but I'm not looking at flood control because the comments might be somewhat
GT> conversational.
If you are saving to SQL you can limit this from the SQL end as well
as the PHP code, but it's worth doing at the PHP level too.
GT> I have a couple PHP books (like the PHP Cookbook, PHP: Read Less, Learn
GT> More) and a couple PHP/mySQL books and I can't seem to find anything about
GT> that "transformation". Are there other books that describe what actually
GT> happens? Is that on php.net somewhere, and what kind of keywords should I
GT> use to find it? I don't think "transformation" is the right word.
True.. have a look for "server side scripting language" (even though
you can use PHP for more than that). Technically I guess it's an
interpreted language though.
GT> Also, perl has "strict", which is to prevent other people from running your
GT> scripts from their server. I added strip_tags to prevent someone from
GT> running code on my server. Have I got my a** covered?
From cross site scripting attacks - yeah.
--
Best regards,
Richard Davey
http://www.phpcommunity.org/wiki/296.html