how to self redirect inside of echo statement
i got error in this statement
//echo '<form name=for method=post action="<?php echo $_SERVER[PHP_SELF]; ?> " >';
self redirect
Moderator: General Moderators
-
kalpesh.mahida
- Forum Commoner
- Posts: 36
- Joined: Wed Oct 06, 2010 7:09 am
Re: self redirect
Code: Select all
echo '<form name=for method=post action='.$_SERVER['PHP_SELF'].'>';
Re: self redirect
Do not use $_SERVER['PHP_SELF'] !
It will introduce XSS vulnerabilities!
Use an empty FORM action parameter:
It will introduce XSS vulnerabilities!
Use an empty FORM action parameter:
Code: Select all
<form name="for" method="post" action="">There are 10 types of people in this world, those who understand binary and those who don't
-
kalpesh.mahida
- Forum Commoner
- Posts: 36
- Joined: Wed Oct 06, 2010 7:09 am
Re: self redirect
VladSun,
thanks for drawing attention to XSS vulnerabilities associated with $_SERVER['PHP_SELF']
thanks for drawing attention to XSS vulnerabilities associated with $_SERVER['PHP_SELF']