mat420

im trying to block metacharacters due to XSS

a vulnerbility scanner i used said to filter metacharacters in my submission form is this enough? thank u <?php $string = "This is some text and numbers 12345 and symbols !£$%^&"; $new_string = ereg_replace("[^A-Za-z0-9]", "", $string); echo $new_string ?>

no problem . thanks so much for ur help. anyone else please? ehh admins are gonna get > if i repost this but idk if ima get answers now with how many pages we've went into this.

are u trying to do like an iframe type thing but use php overflow instead? if so private msg me i can help you. i just did this.

-sigh so not only did that not work but somehow in this process ive managed to break my once request call back form. haha fml. i put it back to the messy code btw because for some reason ur code always seems to be missing my PHP error ..label...thing. was afraid something else might be missing too. just fyi whatever ur browsing source codes with is leaving out code...idk if its cuz its php or what.

i think i got rid of all the white space right after posting that lst msg here im not using an editor btw, notepad ++ and notepad/wordpad i can, make, no, sense, of this. i think the key factor here is that when i get rid of the "table" that the space goes away, that doesnt answer the question for u? ugh i really dont feel like learning how else i can align everything right just because of a stupid space. everything i try to do with this site has already become an hour long process per stupid feature/fix :/ src="reqcallback.swf" bgcolor="#FFFFFF" quality="high" seamlesstabbing="false" allowscriptaccess="samedomain" wmode="transparent" > <noembed> </noembed> </embed> </object></h2> <div class="box_image_wrapper"> </div> <table style="width:250px"> <form method="POST" action="<?php echo $SERVER['SCRIPT_URL']?>#form"> <tbody><tr><td valign="top" style="width:115px;"> <label for="name">Phone #:</label> </td> <td valign="top" style="width: 115px;"> <input type="text" name="email1" id="email1" MAXLENGTH=12 size=16 value="<?php if (!empty($_POST['email1'])) { echo $_POST['email1']; } ?>" />

lol!! i seen those 3 brs in firebug, i dont see them in my code though haha. im going to look again, i dont think those three br's are there though.

nah i said thanks cuz u tried and didnt realize the actual problem. looking at the picture u posted, im not sure u understand my problem, probably my fault for not putting a picture. the rectangle (aka empty space) is what im trying to get rid of. see picture attached pelase. [attachment deleted by admin]

anyone else please? dont know if im gonna get replied now that were on the 2nd page. trying firebug now, will post back if i succeed but i dbt it.

thx

space isnt going anywhere. thats a whole table underneith where the space is that im talking about, u know i mean the space bteween request call back (flash) and phone# (textfield) right? thanks x999 <table style="width:250px"> <tbody><tr><td valign="top" style="width:145px;"> <label for="Message">Enter letters below:</label> </td> <td valign="top"><input name="captcha2" size="8"/> </td> </tr><br> <tr> <td valign="top"><span class="class2"> <label for="Message"><a href="<?php echo captchaWavUrl()?>">Listen To This</a> / <a href="javascript:location.reload(true);">Refresh</a></label></span> </td> </tr> <tr> <td colspan="2" style="text-align:center"> <img style="vertical-align: middle" src="<?php echo captchaImgUrl()?>"> <input type="submit" name="send2" value="Submit"/> <font color="red"><b><?php if (isset($errors2)) { foreach ($errors2 as $error) { echo("<p>$error<p>\n"); } } ?></font></b></p> </td> </tr> </tbody> </table> </form>

apologize if that sounded rude, i didnt mean it to. i just have no idea what im not doing correctly.

can you tell me what im missing please because i dont see it. i added width px 115 to every td. how is adjusting the tables td's width going to eliminate that gap btw please? <p><table width="250px" border="0"> <form method="POST" action="<?php echo $SERVER['SCRIPT_URL']?>#form"> </tr> <tr> <td valign="top" style="width: 115px;"> <label for="name">Phone #:</label> </td> <td valign="top" style="width: 115px;"> <input type="text" name="email1" id="email1" MAXLENGTH=12 size=16 value="<?php if (!empty($_POST['email1'])) { echo $_POST['email1']; } ?>" /> </td> </tr><br> <tr> <td valign="top" style="width: 115px;"> <label for="phone">Verify Phone #:</label> </td> <td valign="top" style="width: 115px;"> <input type="text" name="email2" id="email2" MAXLENGTH=12 size=16 value="<?php if (!empty($_POST['email2'])) { echo $_POST['email2']; } ?>" /> </td> </tr><br><br></table>

ya i got u. idc what its called as long as it works thanks again.

<td valign="top" style="width: 115px;"> wait isnt that wrong? style in a td < > ? hm idk crap about code ;/