Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs
Web Application Security
Name:
Email:
*Note: Email address will appear as "user domain ext" to prevent harvesting.
Subject:
Message:
 
Re: Anyone have some basic security tips for PHP-programmers? Nov 21 2003 10:27PM
James Mitchell (reductor askmiky com)
Hello,

For your first block of code, I recommend you use this instead:

foreach($_GET as $k=>$v) {
$v=addslashes($v);
$v=str_replace(';','',$v);
$_GET[$k]=$v;
}

And the same for _POST, how ever this will not absolutely prevent it.

One method of detection would be the following, how ever its not c...

[ more ]  





 

Privacy Statement
Copyright 2009, SecurityFocus