What are the PHP Dos and Donts on XSS?
- by AuGhost Ice
Could any guru tell me the Dos and Donts of PHP when dealing with XSS issue?
What de facto principles shoud I use when passing parameters between forms and dbs to prevent XSS?
Are any of these maintaining state techniques of using 1. hidden form fields, 2.URL rewriting and
3.using cookies are vunerable to XSS?
Also, can any one recommend me a good article that gives basic guidelines on how to prevent such vunerabilites been expolited? Or any coding examples?