note 31578 deleted from tutorial.forms by didou
| From: | didou@php.net | Date: | Sun, 10 Aug 2003 15:17:24 +0000 |
| Subject: | note 31578 deleted from tutorial.forms by didou | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-53816@lists.php.net to get a copy of this message | ||
Note Submitter: phpcomment@shemesh.biz
----
Please note that the code in this example has a Cross Site Scripting vulnerability! Search the web
for "XSS" or "Cross Site Scripting" to find out more.
Do NOT quote user supplied data back to the HTML area of your document without proper escaping (such
as replacing all "<" with "<" and ">" with
">" respectively). Failing to do so may result in your cookies stolen and your web
page changed (at least as far as a specific user is concerned).