Posted by Janwillem Borleffs on 11/13/12 11:20

opt_inf_env@yahoo.com wrote:
> As I understood it is better to replace SID by strip_tags(SID). In
> this case one can avoid an XSS related attack. But I do not know
> what is this attack

http://www.livejournal.com/community/shellcode/11214.html

> and what strip_tags does.

http://www.php.net/strip_tags


JW

[Back to original message]