[Fwd: Re: [PHP] Explanation in Shiflett's PHP Security Briefing]
| From: | afan@afan.net | Date: | Thu, 09 Jun 2005 14:43:56 +0000 |
| Subject: | [Fwd: Re: [PHP] Explanation in Shiflett's PHP Security Briefing] | ||
| Groups: | php.general | ||
| Request: | Send a blank email to php-general+get-216724@lists.php.net to get a copy of this message | ||
Hm? Didn't see this one yesterday on the list?
Let's try again :)
-afan
Chris Shiflett wrote:
You forgot to filter your input. Shame! :-) Escaping alone can save you in many cases, but always filter input and escape output.I confess: I didn't forget. I did it just wrong :( Even I thought I did understand - I didn't. I mixed filtering and escaping. :)
Hope that helps.Oh, yeah! I just learned something new/more! Thanks for all of you guys! :)