Re: foreach() for strings
| From: | Reindl Harald | Date: | Tue, 21 Jun 2011 16:14:40 +0000 |
| Subject: | Re: foreach() for strings | ||
| References: | 1 2 3 4 5 6 7 8 9 10 11 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-53486@lists.php.net to get a copy of this message | ||
Am 21.06.2011 17:55, schrieb Tomas Kuliavas:
> They submit it in utf-8 only if your html form allows them to do that or
> they don't follow html specification and try to exploit your form. Set
> form input charset to iso-8859-1 and your nbspace will take only one byte.
and this naive attitude is the root of most security problems!
why do you believe that every client submission is coming over
your form or generally over anything you can control?
Attachment: [application/pgp-signature] OpenPGP digital signature signature.asc
Attachment: [application/pgp-signature] OpenPGP digital signature signature.asc