RE: [PHP] JavaScript Injection ???
| From: | admin at buskirkgraphics dot com | Date: | Mon, 18 Apr 2011 17:08:38 +0000 |
| Subject: | RE: [PHP] JavaScript Injection ??? | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-312435@lists.php.net to get a copy of this message | ||
Javascript:alert("Hello World");
The browsers have had many updates since last I seen this work.
PHP Server side.
JavaScript Client/Browser Side.
Richard L. Buskirk
You can't grow your business with systems that are on life support...
-----Original Message-----
From: tedd [mailto:tedd@sperling.com]
Sent: Monday, April 18, 2011 1:06 PM
To: php-general@lists.php.net
Subject: [PHP] JavaScript Injection ???
Hi gang:
Quite some time ago I had a demo that showed Javascript injection. It
was where a user could type in:
<script> alert("Evil Code");</script>
and a JavaScript alert would be shown.
But now my demo no longer works. So, what happened? Was there a php
update that prohibited that sort of behavior or did hosts start
setting something to OFF, or what?
If you know, please explain.
Thanks,
tedd
--
-------
http://sperling.com/
--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php