Re: Preventing SQL Injection/ Cross Site Scripting
| From: | Justin Frim | Date: | Wed, 25 Apr 2007 21:20:30 +0000 |
| Subject: | Re: Preventing SQL Injection/ Cross Site Scripting | ||
| References: | 1 2 3 4 5 6 7 8 9 10 11 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-253765@lists.php.net to get a copy of this message | ||
Dotan Cohen wrote:
I currently an using htmlencode, so < and > show as expected. I do expect the math faculty to use those symbols :).Then you're already protected from XSS attacks, no HTML filters necessary. Easy as pi. ;-) (ok, that one was lame)