Community Learn Tools Library Leisure
search
English
Home > Backend Development > PHP Tutorial > ，关于xss跨站脚本

，关于xss跨站脚本

WBOY
Release： 2016-06-13 10:24:41
Original
965 people have browsed it

紧急求助，关于xss跨站脚本
我用360的安全检测扫描网站的时候扫描出来一个高危漏洞。
list.php?pid=6";alert(42873);"
当我用ie进入该url的时候会提示

虽然没有被执行，但是这样应该仍然会有潜在危险吧？

应该怎么避免？

------解决方案--------------------
htmlspecialchars()
------解决方案--------------------
你对 $_GET 操作有何用？
如果是威胁，依然通过 $_GET 进来了

你要检查的是源

Related labels：
alert get htmlspecialchars quot
source：php.cn
Previous article： 更换域名301跳转有关问题 Next article：一个伪静态规则的困惑，请求答疑解决办法
Statement of this Website
The content of this article is voluntarily contributed by netizens, and the copyright belongs to the original author. This site does not assume corresponding legal responsibility. If you find any content suspected of plagiarism or infringement, please contact admin@php.cn
Latest Articles by Author
Latest Issues
function_exists() cannot determine the custom function Function test () {return true;} if (function_exists ('test')) {echo "test is function...
From 2024-04-29 11:01:01
0
3
2157
How to display the mobile version of Google Chrome Hello teacher, how can I change Google Chrome into a mobile version?
From 2024-04-23 00:22:19
0
11
2309
The child window operates the parent window, but the output does not respond. The first two sentences are executable, but the last sentence cannot be implemented.
From 2024-04-19 15:37:47
0
1
1946
There is no output in the parent window document.onclick = function(){ window.opener.document.write('I am the output of the child ...
From 2024-04-18 23:52:34
0
1
1820
Where is the courseware about CSS mind mapping? Courseware
From 2024-04-16 10:10:18
0
0
1874
Related Topics
More>
Popular Recommendations
Popular Tutorials
More>
Related Tutorials
Popular Recommendations
Latest courses
Latest Downloads
More>
Web Effects
Website Source Code
Website Materials
Front End Template