Oxyscripts - PHP Development, tutorials, articles, news, programming, scripts and forums.

Main (PHP)

3rd Party Streams

SlashDot PHPDeveloper.org PHP.Net

Resources

Code Snippets

Authentication Database Graphics HTTP Miscellaneous Time/Date

Affiliates

Minimal Cross Site Scripting Hints
By admin (2007-10-11. 8195 views.)
A common attack on web sites is to plug in HTML code directly into a form field and attempt to gain control over some part of the site.

<?php PHP has 3 built-in functions that will help in your efforts: - htmlspecialchars(str) - htmlentities(str) - strip_tags(str, allowed) htmlspecialchars converts the entire string passed into HTML - converting all the angle brackets and such into HTML equivalents htmlentities takes any special character encountered and returns the HTML escape value for it strip_tags will remove any html tag it finds EXCEPT those mentioned in the allowed string So, overall a nice small section of functions that should alleviate a good portion of the pain of a CSX attack. ?>

Top Sponsor

Sponsors

Advertisting

Affiliates

Shopping Rebates Sell It 4 You Flash Page Counters Get Insured
GPS Tracking Service Charity Donate Info Web Site Hosting VOIP Service

Privacy Policy | Links | Site Map | Advertising

All content on OxyScripts.com is (©)2002-2007

Minimal Cross Site Scripting Hints