Javascript:alert("Hello World"); The browsers have had many updates since last I seen this work. PHP Server side. JavaScript Client/Browser Side. Richard L. Buskirk You can't grow your business with systems that are on life support... -----Original Message----- From: tedd [mailto:tedd@xxxxxxxxxxxx] Sent: Monday, April 18, 2011 1:06 PM To: php-general@xxxxxxxxxxxxx Subject: JavaScript Injection ??? Hi gang: Quite some time ago I had a demo that showed Javascript injection. It was where a user could type in: <script> alert("Evil Code");</script> and a JavaScript alert would be shown. But now my demo no longer works. So, what happened? Was there a php update that prohibited that sort of behavior or did hosts start setting something to OFF, or what? If you know, please explain. Thanks, tedd -- ------- http://sperling.com/ -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php