Hi there,
Im new to PHP and have learnt quite alot but this one problem is anoying me!
I built a guestbook which was fine, works 100% how I want it to. But then came along joe bloggs and trashed my site!
As my guestbook wasn't looking for programing codes it posted them quite happily and I ended up with files being removed and the MYSQL DB being dropped!
I have learnt from this and made it more secure I just need to find the answer to using eregi to stop php or any html.
Now I know that all codes nearly need a < or > so I first got eregi to block this that worked fine if it was the first thing they typed but if you type stuff before it bypasses it!?
Any ideas welcome as its one problem I do not wish to have again!
Many thanks,
Liam
|