Hi,
I'm developing a website where all users can create a small website. I have a wizard where user can step by step create his own page.
In one of the stages there is a stage where user can create a page body(HTML) with AJAX Edit control. The body that user creates I store in SQL Database.
I'm using the Server.HTMLEncode during the save, and when I read it from DB Server.HTMLDecode.
This is probabbly the nost not safe technique that can be.
My Questions are:
Is it safe?
What is the best and safe way to do it?
...
Go to the complete details ...