[FX.php List] $_REQUEST

Jonathan Schwartz jschwartz at exit445.com
Wed Jul 30 17:41:11 MDT 2008


Very helpful. Thanks Leo.

Next year...we need to see you ate DevCon. ;-)

J

>At 12:33 AM +0200 7/31/08, Leo R. Lundgren wrote:
>In any case, what it all comes down to in the end is that the 
>programmer must be the one in control of the flow, and make sure 
>that whatever trash comes in as part of a direct attack or a XSS or 
>whatever, is validated, cleaned, and handled in a safe way. If that 
>is taken care of, then you're pretty good. Of course, who can know 
>that they've done a safe job? Not always as easy, which is why it 
>might be a good idea to listen to recommendations :)
>
>-|
>_______________________________________________
>FX.php_List mailing list
>FX.php_List at mail.iviking.org
>http://www.iviking.org/mailman/listinfo/fx.php_list


-- 
Jonathan Schwartz
Exit 445 Group
jonathan at exit445.com
http://www.exit445.com
415-370-5011


More information about the FX.php_List mailing list