note 31578 added to tutorial.forms
| From: | phpcomment at shemesh dot biz | Date: | Sat, 26 Apr 2003 19:37:39 +0000 |
| Subject: | note 31578 added to tutorial.forms | ||
| Groups: | php.notes | ||
| Request: | Send a blank email to php-notes+get-47149@lists.php.net to get a copy of this message | ||
Please note that the code in this example has a Cross Site Scripting vulnerability! Search the web
for "XSS" or "Cross Site Scripting" to find out more.
Do NOT quote user supplied data back to the HTML area of your document without proper escaping (such
as replacing all "<" with "<" and ">" with
">" respectively). Failing to do so may result in your cookies stolen and your web
page changed (at least as far as a specific user is concerned).
--
http://www.php.net/manual/en/tutorial.forms.php
http://master.php.net/manage/user-notes.php?action=edit+31578
http://master.php.net/manage/user-notes.php?action=delete+31578
http://master.php.net/manage/user-notes.php?action=reject+31578