Shaun wrote:
Hi,
Is there a way to filter metacharacters from all $_POST values sent from
pages on my site in an effort to eliminate the majority of XSS attacks?
htmlentities()
preg_match_all()
--
Burhan Khalid
phplist[at]meidomus[dot]com
http://www.meidomus.com
-----------------------
"Documentation is like sex: when it is good,
it is very, very good; and when it is bad,
it is better than nothing."
--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php
