Re: Filtering and Escaping (Was: Select and $_POST)
| From: | Chris Shiflett | Date: | Sat, 12 Nov 2005 03:01:49 +0000 |
| Subject: | Re: Filtering and Escaping (Was: Select and $_POST) | ||
| References: | 1 2 3 4 5 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-225663@lists.php.net to get a copy of this message | ||
Chris Shiflett wrote:
However, most security issues like XSS and SQL injection aren't really input filtering problems. Often, input filtering can effectively eliminate these vulnerabilities (and there's no excuse to not be filtering input), but escaping addresses the root cause of the problem.I decided to blog about this in more detail: http://shiflett.org/archive/168 Chris -- Chris Shiflett Brain Bulb, The PHP Consultancy http://brainbulb.com/