Re: [PHP] Cross Site Scripting

2003-11-07 Thread Chris Shiflett
--- Shaun <[EMAIL PROTECTED]> wrote: > Is there a way to filter metacharacters from all $_POST values sent from > pages on my site in an effort to eliminate the majority of XSS attacks? Yes, but it's probably more important that you understand what XSS is and what methods people use to protect aga

Re: [PHP] Cross Site Scripting (and SQL Injection)

2003-11-07 Thread John W. Holmes
Shaun wrote: Is there a way to filter metacharacters from all $_POST values sent from pages on my site in an effort to eliminate the majority of XSS attacks? There's no magic function that's going to protect you from Cross Site Scripting or SQL Injection. Do you honestly even know what they are o

Re: [PHP] Cross Site Scripting

2003-11-07 Thread Burhan Khalid
Shaun wrote: Hi, Is there a way to filter metacharacters from all $_POST values sent from pages on my site in an effort to eliminate the majority of XSS attacks? htmlentities() preg_match_all() -- Burhan Khalid phplist[at]meidomus[dot]com http://www.meidomus.com --- "Documentat