PHP Classes

xss

Recommend this page to a friend!

      Top level forums  >  PHP Specialists  >  General  >  xss  
Subject:xss
Summary:Prevent string execution on sbmit
Messages:9
Author:johno dread
Date:2010-04-16 14:59:54
Update:2010-04-20 12:21:01
 

  1. xss   Reply   Report abuse  
Picture of johno dread johno dread - 2010-04-16 14:59:54
Hello,
There are hundreds of solutions to clean up your inputs but I need to clean input on submit. Here is the problem:

<form> <textarea><script type='text/javascript'> alert(document.cookie); </script> </textarea> <input type='submit' value='submit'/></form>

How do I prevent the javascript from executing on submit? otherwise cleaning the string is not longer important.

There are 8 replies in this thread, which are not being displayed.
Browsing this forum thread replies is available only to premium subscribers.


Go to the premium subscriptions page to learn how to become a premium subscriber and have full access to this forum.