darkfreaks Posted July 16, 2012 Share Posted July 16, 2012 so i have checked my code for isset and ctype_alnum and i am still getting cross site scripting injection. if(isset($_POST['variable']) && ctype_alnum($_POST['variable'])) { // code here } why is it telling me i have xss on this variable and all the rest that check for ctype_alnum are completely fine. or is my scanner picking up on false positives? Quote Link to comment Share on other sites More sharing options...
darkfreaks Posted July 16, 2012 Author Share Posted July 16, 2012 Solution: changed ctype_alnum to ctype_alpha Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.