<, script and > inserted in DB

<, script and > inserted in DB

El Forum
Guest

10-09-2010, 08:37 PM

[eluser]techgnome[/eluser]
encoding < into > isn't the same as escaping it. Might want to look up the XSS filtering in the Users Guide. I think that will take care of that.

-tg

Messages In This Thread

<, script and > inserted in DB - by El Forum - 10-09-2010, 03:22 PM

<, script and > inserted in DB - by El Forum - 10-09-2010, 08:37 PM

<, script and > inserted in DB - by El Forum - 10-10-2010, 02:26 AM

<, script and > inserted in DB - by El Forum - 10-10-2010, 06:31 AM