note 31678 added to security
| From: | ManifoldNick at columbus dot rr dot com | Date: | Wed, 30 Apr 2003 03:30:57 +0000 |
| Subject: | note 31678 added to security | ||
| Groups: | php.notes | ||
| Request: | Send a blank email to php-notes+get-47274@lists.php.net to get a copy of this message | ||
Remember that security risks often don't involve months of prep work or backdoors or whatever
else you saw on Swordfish ;) In fact one of the bigges newbie mistakes is not removing
"<" from user input (especially when using message boards) so in theory a user could
secerely mess up a page or even have your server run php scripts which would allow them to wreak
havoc on your site.
--
http://www.php.net/manual/en/security.php
http://master.php.net/manage/user-notes.php?action=edit+31678
http://master.php.net/manage/user-notes.php?action=delete+31678
http://master.php.net/manage/user-notes.php?action=reject+31678