note 42020 added to function.htmlentities

From: Date: Thu, 29 Apr 2004 18:29:15 +0000
Subject: note 42020 added to function.htmlentities
Groups: php.notes 
Request: Send a blank email to php-notes+get-69009@lists.php.net to get a copy of this message
This fuction is particularly useful against XSS (cross-site-scripting-). XSS makes use of holes in code, whether it be in Javascript or PHP. XSS often, if not always, uses HTML entities to do its evil deeds, so this function in co-operation with your scripts (particularly search or submitting scripts) is a very useful tool in combatting "H4X0rz". ---- Manual Page -- http://www.php.net/manual/en/function.htmlentities.php Edit -- http://master.php.net/manage/user-notes.php?action=edit+42020 Delete -- http://master.php.net/manage/user-notes.php?action=delete+42020&report=yes Reject -- http://master.php.net/manage/user-notes.php?action=reject+42020&report=yes Search -- http://master.php.net/manage/user-notes.php

« previous php.notes (#69009) next »