Women in Technology

Hear us Roar


Article:
  User-Friendly Form Validation with PHP and CSS
Subject:   $_SERVER['PHP_SELF']?
Date:   2009-05-17 21:56:17
From:   Shubhamoy
Response to: $_SERVER['PHP_SELF']?

Hi,


We should avoid using $_SERVER['PHP_SELF'] instead htmlentities($_SERVER['PHP_SELF']) should be preferred. This will block the XSS Hack. For more information read this : http://www.html-form-guide.com/php-form/php-form-action-self.html


BR,
Shubhamoy
http://shubhamoy.com/blog

Recommended for You
 
Sign up today to receive special discounts,
product alerts, and news from O'Reilly.
Privacy Policy >
View Sample Newsletter >