note 31678 added to security

From: Date: Wed, 30 Apr 2003 03:30:57 +0000
Subject: note 31678 added to security
Groups: php.notes 
Request: Send a blank email to php-notes+get-47274@lists.php.net to get a copy of this message
Remember that security risks often don't involve months of prep work or backdoors or whatever else you saw on Swordfish ;) In fact one of the bigges newbie mistakes is not removing "<" from user input (especially when using message boards) so in theory a user could secerely mess up a page or even have your server run php scripts which would allow them to wreak havoc on your site. -- http://www.php.net/manual/en/security.php http://master.php.net/manage/user-notes.php?action=edit+31678 http://master.php.net/manage/user-notes.php?action=delete+31678 http://master.php.net/manage/user-notes.php?action=reject+31678

« previous php.notes (#47274) next »