note 31578 added to tutorial.forms

From: Date: Sat, 26 Apr 2003 19:37:39 +0000
Subject: note 31578 added to tutorial.forms
Groups: php.notes 
Request: Send a blank email to php-notes+get-47149@lists.php.net to get a copy of this message
Please note that the code in this example has a Cross Site Scripting vulnerability! Search the web for "XSS" or "Cross Site Scripting" to find out more. Do NOT quote user supplied data back to the HTML area of your document without proper escaping (such as replacing all "<" with "&lt;" and ">" with "&gt;" respectively). Failing to do so may result in your cookies stolen and your web page changed (at least as far as a specific user is concerned). -- http://www.php.net/manual/en/tutorial.forms.php http://master.php.net/manage/user-notes.php?action=edit+31578 http://master.php.net/manage/user-notes.php?action=delete+31578 http://master.php.net/manage/user-notes.php?action=reject+31578

« previous php.notes (#47149) next »