Good day! There is a website, for example, http://mysite.ru/ if you add to the path? D = 1 & search = the '"()% 25alert (9925) & view = searchd then a window appears with the inscription 9925. How to avoid this?
- Filter search on server at least via htmlspecialchars () - Yaroslav Molchan
- everything is done on the site in the form, nothing happens. This is only in url when you insert and press enter. - Jabbar Guliyev
- Well, someone also displays the data from the search on the page, and they didn’t keep up with it if I inserted it on any other site and nothing would come out. - Yaroslav Molchan
|