Re: Premature Ajax-ulation
| From: | Dan | Date: | Tue, 07 Aug 2007 20:23:00 +0000 |
| Subject: | Re: Premature Ajax-ulation | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-260322@lists.php.net to get a copy of this message | ||
Ahh, the PHP newsgroup. The last place I thought I would see a refrence to a Defcon or Blackhat talk.
""Jay Blanchard"" <jblanchard@pocket.com> wrote in message news:56608562F6D5D948B22F5615E3F57E6902A6B606@YGEX01WAL.onecall.local...
One of my developers saw the following article;
http://arstechnica.com/news.ars/post/20070802-security-experts-warn-deve
lopers-about-the-risks-of-premature-ajax-ulation.html
How are you securing Ajax? I know that for the most part we send data to
a PHP script for processing, so all of the normal rules for sending that
data apply (mysql_real_escape_string(), etc.)