filter metacharacters from user input.
Moderator: General Moderators
-
ichikawaono
- Forum Newbie
- Posts: 2
- Joined: Tue Jan 28, 2014 12:50 am
filter metacharacters from user input.
How to filter metacharacters from user input. This is the finding after Security Posture Assessment.Nowadays, most of the web applications have this kind of problem. How to filter it? 
Re: filter metacharacters from user input.
Best practice is not to filter the input but to escape it so that it won't cause any problems. Unless you want to post code to get help understanding what's wrong and how to fix it, Google for terms like "SQL injection" and "XSS".
-
ichikawaono
- Forum Newbie
- Posts: 2
- Joined: Tue Jan 28, 2014 12:50 am
Re: filter metacharacters from user input.
do we need to develop a new function for this. It Happen on my forgot password and email's field..does anyone have fix this problem before this
Re: filter metacharacters from user input.
It depends on the code you have in place now.
I'm going to keep shooting blind until you start giving real, concrete details about the application.
I'm going to keep shooting blind until you start giving real, concrete details about the application.