Re: A Review Request

From: Date: Fri, 20 May 2011 00:59:43 +0000
Subject: Re: A Review Request
References: 1 2 3 4  Groups: php.general 
Request: Send a blank email to php-general+get-312941@lists.php.net to get a copy of this message
At 8:51 PM -0400 5/19/11, Alex Nikitin wrote:
Tedd, yes you do have to worry about xss, yes with unescaped PHP_SELF you can inject code into the form here <form name="my_form" action="<?php echo($self);?>" method="post" >
Ahhh! Most excellent. I'll change that. Cheers, tedd -- ------- http://sperling.com/

« previous php.general (#312941) next »