Re: Re[2]: [nyphp-talk] Need suggestions on building a hacker trap...

2008-08-12 Thread Brent Baisley
> Always, always, always sanitized input from the user. These hackers will > screen scrap web pages to get interesting looking links/forms and then send > them directly to your script trying to break it. > As Ken said, always sanitize. Your input should assume that the data came from a source you

Re[2]: [nyphp-talk] Need suggestions on building a hacker trap...

2008-08-12 Thread Ken Robinson
At 07:26 AM 8/12/2008, [EMAIL PROTECTED] wrote: Hello David, > So what exactly does the parameter Mode do? Isn't this line showing that a > parameter with value got passed to a script with GET? In that case, which > input validation / processing do your scripts have? > David > _

Re[2]: [nyphp-talk] Need suggestions on building a hacker trap...

2008-08-12 Thread mikesz
Hello David, > So what exactly does the parameter Mode do? Isn't this line showing that a > parameter with value got passed to a script with GET? In that case, which > input validation / processing do your scripts have? > David > ___ Indeed, it was a G

Re[2]: [nyphp-talk] Need suggestions on building a hacker trap...

2008-08-12 Thread mikesz
"So what exactly does the parameter Mode do? " Normally, Mode= takes query parameters like "latest" or "featured" member for sorting to select the correct display values. One of the "correct" script generated calls is "index.php?Mode=last&Sex=all" which tells the script to do a select for the late