Re: Preventing SQL Injection/ Cross Site Scripting
| From: | Chris Shiflett | Date: | Sat, 21 Apr 2007 14:11:52 +0000 |
| Subject: | Re: Preventing SQL Injection/ Cross Site Scripting | ||
| References: | 1 2 3 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-253432@lists.php.net to get a copy of this message | ||
Dotan Cohen wrote:
> > I recommend you dig deeper into that xss page you might even
> > find a script that filters xss.
>
> Obviously I keep missing it.
You might find these examples useful:
http://phpsecurity.org/code/ch01-3
http://phpsecurity.org/code/ch01-4
Hope that helps.
Chris
--
Chris Shiflett
http://shiflett.org/