Hello everyone, if the site has such a vulnerability:

site.com/index.php?page=1<script>alert("XSS")</script>

How can you protect against it? Please in more detail.

Assume:

 <? if(isset($_GET['page'])) { getInfo($_GET['page']); } ?>
  • Parse <script> and clean - kandi

1 answer 1

At least so:

 $page = strip_tags($_GET['page']);