note 82371 deleted from security.general by danbrown

Note Submitter: alex ---- well, if you're a skilled php programmer, you can avoid many of these dangers.. for example xss... as its the most common attack, filter all the input you gain from the user (not only with htmlspecialchars but also with more personalized string-checks for specific words and chars like document.location and so on). or file injection (filter out ../ and so on). i admit that php has its weakpoints (sessions...), but nothing is 100% secure (but you can use ssl for high security projects..)