Posted by Tyrone Slothrop on 12/05/07 04:59

On Tue, 04 Dec 2007 23:35:40 -0500, Jen <jenny@8675309.com> wrote:

>
>Why oh why does my domain name become part of the link when I use the
>following code.
><a href="<? echo $web; ?>">Website</a>
> the variable $web is from a user input form.
>Here's what the link looks like
>--http://mysite.com/www.variablesite.com

If the http:// is not part of $web, the browser will assume it is a
link on your site. You should parse the user input to validate its
structure.

[Back to original message]