Palle =Bo Nielsen wrote:Hi =all,How do you protect =yourself from bad code submitted to a form =field.How do you make sure =that e.g. HTML can be made visible with the right syntax but no =executable when submitted from a form field?
I think =the standard solution for webforum scripts regardless of programming =language is to strip *all* html from the input and then add a set of =custom codes for html tags that are allowed. This is easily done in =WebDNA using [RemoveHTML] and [ConvertWords]. You can of course use the =same procedure to filter out non-acceptable WebDNA tags from the =input.
Frank Nordberg
http://www.musicaviva.com
--=-------------------------------------------------------
This message =is sent to you because you are subscribed to
the mailing list =<talk@webdna.us>.
To unsubscribe, E-mail to: =<talk-leave@webdna.us>
archives: =http://mail.webdna.us/list/talk@webdna.us
old archives: =http://dev.webdna.us/TalkListArchive/
|
Palle =Bo Nielsen wrote:Hi =all,How do you protect =yourself from bad code submitted to a form =field.How do you make sure =that e.g. HTML can be made visible with the right syntax but no =executable when submitted from a form field?
I think =the standard solution for webforum scripts regardless of programming =language is to strip *all* html from the input and then add a set of =custom codes for html tags that are allowed. This is easily done in =WebDNA using [removehtml] and [convertwords]. You can of course use the =same procedure to filter out non-acceptable WebDNA tags from the =input.
Frank Nordberg
http://www.musicaviva.com
--=-------------------------------------------------------
This message =is sent to you because you are subscribed to
the mailing list =<talk@webdna.us>.
To unsubscribe, E-mail to: =<talk-leave@webdna.us>
archives: =http://mail.webdna.us/list/talk@webdna.us
old archives: =http://dev.webdna.us/TalkListArchive/
DOWNLOAD WEBDNA NOW!
The WebDNA community talk-list is the best place to get some help: several hundred extremely proficient programmers with an excellent knowledge of WebDNA and an excellent spirit will deliver all the tips and tricks you can imagine...