January 10th, 2006, 01:35 PM
|
 |
It's only wrong if you're caught....
|
|
Join Date: Dec 2003
Location: Sydney, Australia
|
|
Quote: | Originally Posted by SimonGreenhill It's a filter for apache's mod_security which removes all incoming cross site scripting attacks. |
Unless of course you've got a problem like PHPBB did where you could URLencode the string twice (so for to get it past the filter you pass %253C in the URL, PHP converts it to %3C and if thats url decoded you get <), but then again if you're using PHPBB, there's not much that'll save you.... (Just wanted to say that while its a good idea, its not a silver bullet, just in case someone takes it as if it is....)
|
Del.icio.us
Digg
Google
Spurl
Blink
Furl
Simpy
Y! MyWeb
Linear Mode
