Re: losing session data with cross-site scripting
| From: | Chris Shiflett | Date: | Thu, 22 Sep 2005 02:22:11 +0000 |
| Subject: | Re: losing session data with cross-site scripting | ||
| References: | 1 2 3 4 5 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-222959@lists.php.net to get a copy of this message | ||
Steve Lefevre wrote:
Can you explain what cross-site scripting is, then?This article is quite old (a few years), and there are a few inconsistencies I would like to correct, but I think it does a better job of explaining than I can in an email: http://shiflett.org/articles/foiling-cross-site-attacks -- Chris Shiflett Brain Bulb, The PHP Consultancy http://brainbulb.com/