PHP Tutorial (& MySQL) #18 - XSS Attacks

preview_player
Показать описание
Hey gang, in this video I'll show you how to add a little protection against cross site scripting attacks.

----------------------------------------

🐱‍💻 🐱‍💻 Course Links:

🤑🤑 Donate


🎓🎓 Find me on Udemy

Рекомендации по теме
Комментарии
Автор

There is no other teacher who can explain better than you 😊

shoaibhamza
Автор

haha, he called them morons, brilliant

MrIshumaru
Автор

its very hard to find a better teacher

nxizjub
Автор

you are great in explaining stuff. Can you make a video about prepared statements for preventing sql injections?

vhfydvh
Автор

Hi there,
Very interesting tutorial!
Thank you so much, i had subscribed and like this tutorial.
I feel like i'm really learning PHP with your tutorials.

I Really appreciate your effort!
Mr. Merino

emerino
Автор

I used chrome and it led me to your website, when I filled the javascript code and submitted it! What does it mean?

samuelamare
Автор

Great work Shaun. Would you create laravel series later on?

huckfaters
Автор

Great tutorial as always. How does this method of safety compares to prepared statement?

RameenFallschirmjager
Автор

htmlspecialchars does not stop this attack, I am a well known security researcher. You simply have to change a couple things and the code will run, this is a way to instill a false sense of security while making an insecure site. I'd be happy to chat with you on how to write code that XSS should not fire on.

Zudasworld
Автор

chrome does redirect when I do this attack.BTW, I'm following your tuts since 2017 your contents are awesome.

premKumar-ilqy
Автор

and should we do this whenever we have an input field? suppose we have a contact form/a comment section or login page or whatever.

ahmedbakhach
Автор

How do you deal with article systems where you have a text editor. Wouldnt this protection stop it from working properly? Like in this youtube comment i can still type <script> . How do they do it

Avean
Автор

How come you are not using - htmlentities($itemName, ENT_QUOTES, 'UTF-8')?

rembrandt
Автор

So XSS attack only works on yourself? I mean why would someone paste code to a form

mostafa
Автор

I found Google Chrome let me redirect as well.

Martin