Posted by Chris Shiflett on 12/07/05 21:33

Michael B Allen wrote:
> Can someone recommend a general method for avoiding / eliminating XSS
> vulnerbilities with PHP?

Yeah, escape output. It's really that simple.

Curt Zirzow made a nice post related to this topic yesterday., and
here's a simple example:

http://phpsecurity.org/code/ch01-4

Hope that helps!

Chris

--
Chris Shiflett
Brain Bulb, The PHP Consultancy
http://brainbulb.com/

• Next in forum: Re: [PHP] Preventing Cross Site Scripting Vulnerbilities
• Prev in forum: Re: [PHP] Preventing Cross Site Scripting Vulnerbilities
• Thread view: Re: [PHP] Preventing Cross Site Scripting Vulnerbilities

[Reply to this message]