Re: Echoing input w/o sanatizing - what is the danger
| From: | Richard Lynch | Date: | Wed, 08 Aug 2007 00:00:14 +0000 |
| Subject: | Re: Echoing input w/o sanatizing - what is the danger | ||
| References: | 1 2 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-260361@lists.php.net to get a copy of this message | ||
On Tue, August 7, 2007 5:08 pm, Daniel Brown wrote:
> It's actually not so much for echo'ing as it is for processing the
> data in another manner that makes it dangerous not to do some
> sanitizing and checking.... such as database manipulation.
This is wrong.
Google for "cross site scripting attack" to get some sense of just how
wrong this is. :-)
--
Some people have a "gift" link here.
Know what I want?
I want you to buy a CD from some indie artist.
http://cdbaby.com/browse/from/lynch
Yeah, I get a buck. So?