php - Protecting my forms against XSS attacks -


register.php 

    $_session['email'] = $_post['remail'];     $_session['first_name'] = $_post['firstname'];     $_session['last_name'] = $_post['lastname'];      $first_name = $mysqli->escape_string($_post['firstname']));     $last_name = $mysqli->escape_string($_post['lastname']);     $email = $mysqli->escape_string($_post['remail']);     $password = $mysqli->escape_string(password_hash($_post['rpassword'], password_bcrypt));     $confirmpassword = $mysqli->escape_string(password_hash($_post['confirmpassword'], password_bcrypt));     $hash = $mysqli->escape_string(md5(rand(0,1000)));      $result = $mysqli->query("select * users email='$email'") or die($mysqli->error());      if ($result->num_rows > 0)     {         $_session['message'] = '<div class="info-alert">user email exists!</div>';         header("location: error.php");     }       else {         $sql = "insert users (first_name, last_name, email, password, hash)"              ."values ('$first_name','$last_name','$email','$password', '$hash')";

i new php , coding. problem don't know how use htmlspecialchars prevent against basic xss attacks.

how can this?


Comments

Post a Comment

Popular posts from this blog

ubuntu - PHP script to find files of certain extensions in a directory, returns populated array when run in browser, but empty array when run from terminal -

i running os ububtu 16.04. ultimate goal able run php script cron job every minute. here php script located @ /var/www/html/tests/test/index.php : <?php $directorypath = $_server['document_root']."/tests/test/data/"; echo "directorypath: $directorypath<br><br>";//check $imagefilepathsarray = glob($directorypath . "*.{png,gif}", glob_brace); echo "<br><br>imagefilepathsarray: "; print_r($imagefilepathsarray);//check ?> when open php script in browser visiting url my-ip-address/tests/test/index.php , get: directorypath: /var/www/html/tests/test/data/ imagefilepathsarray:array( [0] => /var/www/html/tests/test/data/pic.png [1] => /var/www/html/tests/test/data/pic.gif ) before writing cron job in crontab file, need check if can run anywhere using terminal . opened ubuntu terminal @ /home/ location, , executed in terminal: sudo php /var/www/html/tests/test/index.php i got following out...
Read more

php - How can i create a user dashboard -

today have questions you, want create user dashboard site, include (obviously), users data, example -email -username -and others stuff how can information, , print them in html page? if can, how can these information via php sessions? shuld use session? example, if user login, , start new session ( session_start() ), how can data print in dashboard? should use php "project"? in advice, have day , thank time!
Read more

javascript - How to detect toggling of the fullscreen-toolbar in jQuery Mobile? -

i have jquery mobile page fixed full-screen toolbar, data-tap-toggle enabled. straight under toolbar have positioned banner should slide upwards when toolbar hiding , slide downward when toolbar showing. jquery mobile toggles toolbar applying , removing ui-fixed-hidden class - sadly, can't find in documentation of toolbar widget toggle , hide or show event that. how can detect when toolbar toggled, reposition banner? .banner { position: fixed; background-color: darkseagreen; top: 46px; min-height: 48px; width: 100%; text-align: center; line-height: 48px; } <!doctype html> <html> <head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1, user-scalable=no"> <link rel="stylesheet" href="https://code.jquery.com/mobile/1.4.5/jquery.mobile-1.4.5.css"> <script src="https://code.jquery.com/jquery-1....
Read more