What are URL injection attacks and what are their dangers (some examples if you have them)?
How can I prevent them?
The website I am developing has a user feedback section. I am using htmlEncode to stop injection attacks but they still show up in the feedback on the page as inert strings. I would like some way of filtering them so that they do not get saved to my database
in the first place. I have considered using a regular expression to do this but do not really understand them.
Specifically, I am looking for a way to filter out something like "<scrpit>alert("ok")</script>".
Go to the complete details ...