[SOLVED] XSS Regex Help !

[d.shankar]

This regex matches when the input matches with a XSS attack

for eg: if a user enters <script> tag then the regex will prove to be true.

But in my case it is failing .. Please help

 

<?php
$subject="<script>"; //An XSS input
$pattern='(?:\<\w*:?s(?:[^\>]*)t(?!rong))|(?:\<scri)|(<\w+:\w+)';
if(preg_match($pattern,$subject))
{
echo "XSS Injection Found in the string $subject";
}
else
{
echo "No XSS Injection Found in the string $subject";
}
?>

 

Code has no errors but it is always echoing the else part.

[jitesh]

<?php

$subject="<script>"; //An XSS input

$pattern='((?:\<\w*:?s(?:[^\>]*)t(?!rong))|(?:\<scri)|(<\w+:\w+))';

if(preg_match($pattern,$subject))

{

echo "XSS Injection Found in the string ". htmlentities($subject);

}

else

{

echo "No XSS Injection Found in the string ". htmlentities($subject);

}

?>

 

 

 

[d.shankar]

Jitesh its working gr8.

Thx.