note 42020 added to function.htmlentities
| From: | jake_mcmahon at hotmail dot com | Date: | Thu, 29 Apr 2004 18:29:15 +0000 |
| Subject: | note 42020 added to function.htmlentities | ||
| Groups: | php.notes | ||
| Request: | Send a blank email to php-notes+get-69009@lists.php.net to get a copy of this message | ||
This fuction is particularly useful against XSS (cross-site-scripting-). XSS makes use of holes in
code, whether it be in Javascript or PHP. XSS often, if not always, uses HTML entities to do its
evil deeds, so this function in co-operation with your scripts (particularly search or submitting
scripts) is a very useful tool in combatting "H4X0rz".
----
Manual Page -- http://www.php.net/manual/en/function.htmlentities.php
Edit -- http://master.php.net/manage/user-notes.php?action=edit+42020
Delete -- http://master.php.net/manage/user-notes.php?action=delete+42020&report=yes
Reject -- http://master.php.net/manage/user-notes.php?action=reject+42020&report=yes
Search -- http://master.php.net/manage/user-notes.php