Re: I need a fresh look at storing variables in MySQL
| From: | Rene Veerman | Date: | Sun, 14 Mar 2010 11:24:05 +0000 |
| Subject: | Re: I need a fresh look at storing variables in MySQL | ||
| References: | 1 2 3 4 5 6 7 8 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-302797@lists.php.net to get a copy of this message | ||
On Sun, Mar 14, 2010 at 12:13 PM, Ashley Sheridan
<ash@ashleysheridan.co.uk>wrote:
>
> I have to deal with a lot of CMS's, so I expect the users to enter some
> HTML code through a rich-text editor, and they expect to be able to.
>
I'd love to have a copy of whatever function you use to filter out bad
HTML/js/flash for use cases where users are allowed to enter html.
I'm aware of strip_tags() "allowed tags" param, but haven't got a good list
for it.
>
> Aside from that, it's good to have a complete copy of the code a user
> attempted to insert, to see the methodology of an attack should it ever
> occur.
>
I should've said "possibly log & mail the details of the attempt", which is
what i'd do ;)