Hello Gabino,

Thursday, April 15, 2004, 4:36:48 PM, you wrote:

GT> Thanks for the quick response. I'm thinking of adding a check for the string
GT> length, so someone doesn't copy and paste a dictionary into my guestbook,
GT> but I'm not looking at flood control because the comments might be somewhat
GT> conversational.

If you are saving to SQL you can limit this from the SQL end as well
as the PHP code, but it's worth doing at the PHP level too.

GT> I have a couple PHP books (like the PHP Cookbook, PHP: Read Less, Learn
GT> More) and a couple PHP/mySQL books and I can't seem to find anything about
GT> that "transformation". Are there other books that describe what actually
GT> happens? Is that on php.net somewhere, and what kind of keywords should I
GT> use to find it? I don't think "transformation" is the right word.

True.. have a look for "server side scripting language" (even though
you can use PHP for more than that). Technically I guess it's an
interpreted language though.

GT> Also, perl has "strict", which is to prevent other people from running your
GT> scripts from their server. I added strip_tags to prevent someone from
GT> running code on my server. Have I got my a** covered?

From cross site scripting attacks - yeah.

-- 
Best regards,
 Richard Davey
 http://www.phpcommunity.org/wiki/296.html

--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php

Reply via email to