Re: stripping HTML, SQL injections ... - Mailing list pgsql-general

From Ian Barwick
Subject Re: stripping HTML, SQL injections ...
Date
Msg-id 1d581afe0711141621g2ff0bfe7j61bfc654204a3e1@mail.gmail.com
Whole thread Raw
In response to Re: stripping HTML, SQL injections ...  ("Martin Gainty" <mgainty@hotmail.com>)
List pgsql-general
Martin,

2000/11/15, Martin Gainty <mgainty@hotmail.com>:
> Scott-
>
> In JavaScript
> http://www.java2s.com/Tutorial/JavaScript/0520__Regular-Expressions/StripHTM
> L.htm

I don't remember what the consensus was back in 2000 (your mail's
timestamp), but in 2007 it's Not A Good Idea to rely on client-side
validation for security-related operations ;).


Regards

Ian Barwick


--
http://sql-info.de/index.html

pgsql-general by date:

Previous
From: "Martin Gainty"
Date:
Subject: Re: stripping HTML, SQL injections ...
Next
From: "Martin Gainty"
Date:
Subject: Re: stripping HTML, SQL injections ...