[Fwd: Re: Explanation in Shiflett's PHP Security Briefing]

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hm? Didn't see this one yesterday on the list?
Let's try again :)

-afan

Chris Shiflett wrote:

You forgot to filter your input. Shame! :-)
Escaping alone can save you in many cases, but always filter input and escape output.

I confess: I didn't forget. I did it just wrong :( Even I thought I did understand - I didn't. I mixed filtering and escaping.
:)

Hope that helps.

Oh, yeah! I just learned something new/more!

Thanks for all of you guys!
:)

--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php


[Index of Archives]     [PHP Home]     [Apache Users]     [PHP on Windows]     [Kernel Newbies]     [PHP Install]     [PHP Classes]     [Pear]     [Postgresql]     [Postgresql PHP]     [PHP on Windows]     [PHP Database Programming]     [PHP SOAP]

  Powered by Linux