Comment Comment by codedokode > you should NEVER TRUST USER INPUTThat is not clear at all and pretty useless. What does it mean? I should not accept any user input at all?> strip everything that is not neededThat does not always work. What if I have a comment form that should accept any characters? parent codedokode 10 years ago
That is not clear at all and pretty useless. What does it mean? I should not accept any user input at all?
> strip everything that is not needed
That does not always work. What if I have a comment form that should accept any characters?