Re: Question about a security function
| From: | David Otton | Date: | Fri, 21 May 2010 13:24:19 +0000 |
| Subject: | Re: Question about a security function | ||
| References: | 1 2 3 4 5 6 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-305388@lists.php.net to get a copy of this message | ||
On 20 May 2010 16:51, Al <news@ridersite.org> wrote:
> I'm not being clear. First pass is thru the blacklist, which effectually
> tells hacker to not bother and totally deletes the entry.
>
> If the raw entry gets past the blacklist, it must then only contain my
> whitelist tags. e.g., the two examples you cited were caught by the
> whitelist parser.
Ah, gotcha. That seems like a much better approach to me. But if the
whitelist's going to stop the submission, then why bother with a
blacklist at all?