|
Posted by zoilus on 06/06/07 22:06
Thanks, good suggestion. I will.
Jonathan N. Little wrote:
> Erwin Moller wrote:
>
>> Iván Sánchez Ortega wrote:
>>
>>> Erwin Moller wrote:
>>>
>>>> I never understood why people want to use PHP_SELF.
>>>
>>> Portability.
>>
>>
>> Right, I see your point.
>> Comes in handy when using general form-generating routines and the
>> like. ;-)
>
>
> I would advise:
>
> // prevent some wiseass XSS insertion
> $sanitized=htmlentities($_SERVER['PHP_SELF']);
>
> <form action="<?php echo $sanitized; ?>" method="post">
>
>
Navigation:
[Reply to this message]
|