Showing posts with label Javascript. Show all posts
Showing posts with label Javascript. Show all posts

Wednesday, February 17, 2010

PHP Protection from XSS attacks

If you have a forum, or blog hosted on your site. Then you should be aware of cross site scripting vulnerabilities that any basic HTML form can produce. I will show you how the vulnerability exists, how to detect it, and how to mitigate this form of attack.


What is an Cross-Site Scripting (XSS) Attack?

Cross site scripting vulnerabilities are produced when a web site displays unfiltered user generated input on to the site. By allowing users to supply their own content, hackers can figure out ways to get malicious content on the website by injecting it with their own scripts via javascript and change the