Javascript:alert("Hello World");
The browsers have had many updates since last I seen this work.

PHP Server side.
JavaScript Client/Browser Side.




Richard L. Buskirk

You can't grow your business with systems that are on life support...

-----Original Message-----
From: tedd [mailto:t...@sperling.com] 
Sent: Monday, April 18, 2011 1:06 PM
To: php-general@lists.php.net
Subject: [PHP] JavaScript Injection ???

Hi gang:

Quite some time ago I had a demo that showed Javascript injection. It 
was where a user could type in:

<script> alert("Evil Code");</script>

and a JavaScript alert would be shown.

But now my demo no longer works. So, what happened? Was there a php 
update that prohibited that sort of behavior or did hosts start 
setting something to OFF, or what?

If you know, please explain.

Thanks,

tedd
-- 
-------
http://sperling.com/

-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php


-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php

Reply via email to