June 2005
Intermediate
720 pages
20h 6m
English
HTML is simply plain text, like <b>, which is given special meaning by Web browsers (as by making text bold). Because of this fact, your Web site’s user could easily add HTML or JavaScript to their form data, like the comments field in the previous example (Figure 10.8). What’s wrong with that, you might ask?

Many dynamically driven Web applications take the information submitted by a user, store it in a database, and then redisplay that information on another page. Think of a forum, as just one example. At the very least, if a user ...
Read now
Unlock full access