Premature Ajax-ulation
| From: | Jay Blanchard | Date: | Fri, 03 Aug 2007 13:39:11 +0000 |
| Subject: | Premature Ajax-ulation | ||
| Groups: | php.general | ||
| Request: | Send a blank email to php-general+get-260122@lists.php.net to get a copy of this message | ||
One of my developers saw the following article;
http://arstechnica.com/news.ars/post/20070802-security-experts-warn-deve
lopers-about-the-risks-of-premature-ajax-ulation.html
How are you securing Ajax? I know that for the most part we send data to
a PHP script for processing, so all of the normal rules for sending that
data apply (mysql_real_escape_string(), etc.)