stuffradio Posted November 23, 2007 Share Posted November 23, 2007 What are the best things to use to protect me from all XSS attacks? A website told me to use the following: urlencode htmlentities Is there anything else I should use? If so... when should I use them? Thanks Quote Link to comment Share on other sites More sharing options...
helraizer Posted November 23, 2007 Share Posted November 23, 2007 The way I did it (from what I've learnt only today thanks to the beta-testing forum ) is use htmlspecialchars and htmlspecialchars_decode. It converts the symbols " ' < > & to " ' < > & - so then they can't use "> to close you input tag. Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.