Re: Re: Posting variable outside of the post form
| From: | Doctorrock | Date: | Tue, 13 Mar 2007 10:47:48 +0000 |
| Subject: | Re: Re: Posting variable outside of the post form | ||
| References: | 1 2 3 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-250407@lists.php.net to get a copy of this message | ||
Mpff, you should start by minding XSS attacks on PHP_SELF, and no echoing it
as raw ... :
http://blog.phpdoc.info/archives/13-XSS-Woes.html