Re: two questions on serverside validation
| From: | Jan G.B. | Date: | Fri, 27 Aug 2010 15:53:02 +0000 |
| Subject: | Re: two questions on serverside validation | ||
| References: | 1 2 3 4 5 6 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-307718@lists.php.net to get a copy of this message | ||
2010/8/27 Jan G.B. <ro0ot.w00t@googlemail.com>:
> But make sure the other code which we don't see
> - does not outpot any _POST / _GET / _REQUEST / _COOKIE variables
> without encoding the contents (f.e. htmlspecialchars), or
> - does not send and user supplied data without scaping the sb-related
> special chars.. (f.e. mysql_real_escape-string).
>
Hell.. Actually I wanted to write "output", "escaping" and
"db-related". Are typo corrections accepted here?! :)