Re: [us...@httpd] Apache2 add module help !

2009-10-28 Thread Nick Kew
antoine wrote: Thank you guys for your propositions but don't focus in the security model. In general if i use an input filter can i modify the page's static html code before any dynamic code is inserted ?? If you run PHP as a filter, you could insert another filter in front of it. Otherwis

Re: [us...@httpd] Apache2 add module help !

2009-10-28 Thread antoine
Nick Kew wrote: Morten K. Poulsen wrote: On Wed, 2009-10-28 at 19:06 +0200, antoine wrote: Consider that we have an html form and a php script that handles the posted data. The scenario is that the bad guy writes in the form for example " ... bad javascript code " and post this so when the clie

Re: [us...@httpd] Apache2 add module help !

2009-10-28 Thread Nick Kew
Morten K. Poulsen wrote: On Wed, 2009-10-28 at 19:06 +0200, antoine wrote: Consider that we have an html form and a php script that handles the posted data. The scenario is that the bad guy writes in the form for example " ... bad javascript code " and post this so when the client get the page w

Re: [us...@httpd] Apache2 add module help !

2009-10-28 Thread Morten K. Poulsen
On Wed, 2009-10-28 at 19:06 +0200, antoine wrote: > Consider that we have an html form and a php script that handles the > posted data. > The scenario is that the bad guy writes in the form for example > " ... bad javascript code " and post this so when the > client get the page we have an attack.

Re: [us...@httpd] Apache2 add module help !

2009-10-28 Thread antoine
André Warnier wrote: antoine wrote: Hello , Consider that i have an html , javascript , php site. My goal is to somehow modify the html , javascript code before php module does its stuff. It is part of a javascript injection defense system. So i want to mark benign javascript before php

Re: [us...@httpd] Apache2 add module help !

2009-10-28 Thread André Warnier
antoine wrote: Hello , Consider that i have an html , javascript , php site. My goal is to somehow modify the html , javascript code before php module does its stuff. It is part of a javascript injection defense system. So i want to mark benign javascript before php module adds bad javas

[us...@httpd] Apache2 add module help !

2009-10-28 Thread antoine
Hello , Consider that i have an html , javascript , php site. My goal is to somehow modify the html , javascript code before php module does its stuff. It is part of a javascript injection defense system. So i want to mark benign javascript before php module adds bad javascript code. I f