Re: Script to sanitize variables

On 3/29/06, Ray Hauge <ray.hauge@americanstudentloan.com> wrote: > Chris Shiflett has written a number of good articles on the matter. You can > find them at: > > http://shiflett.org/articles > > The articles in particular would be: > > Security Corner: Cross-Site Request Forgeries > Security Corner: Data Filtering > Security Corner: SQL Injection Hello Ray, Thanks for the links, they are very informative and gives a clear background on this particular aspect of web security. I was looking for an existing script that I can just plug in to my project though. After some googling around, I've come across kses (http://sourceforge.net/projects/kses). From the website, it says that it's being used in Wordpress and Geeklog. There's also a PHP5 version included in the release so for OOP purists, that ought to be great news. -- Stand before it and there is no beginning. Follow it and there is no end. Stay with the ancient Tao, Move with the present.