sanitization
Is this bad practice use of the error suppression operator?
I\'m working on a database driven site which is using normal database methods rather than prepared statements. Because of this I have to sanitise POST and GET variables when passed to a form action PH[详细]
2023-02-23 03:22 分类:问答TinyMCE removes youtube links
I\'ve got a symfony form with a \"contents\" textarea, which uses tinyMCE. When I write : <p class=\"centre\">[详细]
2023-02-22 20:27 分类:问答Remove javascript from user input but still allow html with PHP?
I want to allow users to write html into a form field but exclude javascript. Is there simple code or a library that will do this?[详细]
2023-02-22 14:01 分类:问答JavaScript-based X/HTML & CSS sanitization
Before everyone tells me that I shouldn\'t do client-side sanitization (I do in fact intend to do it on a client, though it could work in SSJS as well), let me clarify what I\'m trying to do.[详细]
2023-02-22 10:28 分类:问答How do I convert a string into safe SQL String?
I\'m genera开发者_运维百科ting some sql insert statements from a bunch of text files. These text files are generally user input data. I would like to sanitize this data so that it\'s not going to bre[详细]
2023-02-21 12:18 分类:问答JSON prepare with .Net 2.0
I am limited to .Net 2.0 framework.How can I replace all invalid characters in a string?I am building a string array in JSON format and outputting it to the screen.[详细]
2023-02-21 02:30 分类:问答Risk in using isset?
I am new to PHP. I have been advised to sanitize $_GET and $_POST.I have bee开发者_如何学运维n following this advice.[详细]
2023-02-20 04:09 分类:问答Logic of saving text in DB using PHP
friends.I have a page, on which users can add comments (users can enter tags). Comment saves in the DB. Now I am using开发者_运维问答 the next way. I save all comment into DB. And I escape comment fro[详细]
2023-02-19 18:25 分类:问答Is it safe to turn urls into links?
I want to turn urls in the user comments, into links. I don\'t have time to test bloated anti-xss libraries like HTML Purify, so I wouldn\'t be allowing any html tags.[详细]
2023-02-18 21:39 分类:问答PHP MySQL - Sanitization and Validation advice
I\'m just discovering PHPs sanitize and Validate filters, and I had been using MySQL\'s mysql_escape_string to stop SQL Injection.[详细]
2023-02-18 20:56 分类:问答