[thelist] injection attacks on php contact form

Symeon Charalabides symeon at systasis.com
Thu Dec 1 05:44:03 CST 2005


Hi Alex,

> > I believe the W3C link posted says the same.
> >
>  unfortunately I dont have the time to read this week. Why believe when 
> you know? or are you politely telling me to "RTFM"?

No, I was being literal with the "I believe" because I only read that W3C page on 
the day (yesterday) and only once and wouldn't go back to it again, but was 
pretty sure it mentioned this weakness in such verifications schemes.

Symeon Charalabides (cosmopolite trainee)
-------------------------------------------------
http://www.systasis.com



More information about the thelist mailing list