Please check this PHP code for any vul. espically for XXS

Discussion in 'PHP' started by Prateekgupta, Sep 11, 2010.

  1. #1
    please check it for VUL for XXS .

    i had written the following code by muself





    and here is the html form


    please check it for VUL for XXS .

    thanks friends
    love u all :)
    god bless
     
    Prateekgupta, Sep 11, 2010 IP
  2. Eager2Seo

    Eager2Seo Member

    Messages:
    72
    Likes Received:
    3
    Best Answers:
    0
    Trophy Points:
    48
    #2
    Hello,

    Anytime you get data from get or post, you should always use strip_tags() to remove any rogue code passing in. This is one reason why people use frameworks, its done automatically. This is at a minimum!

    
    $link = strip_tags($_POST["link"]);
    $reason = strip_tags($_POST["reason"]);
    Code (markup):
     
    Eager2Seo, Sep 11, 2010 IP