View Single Post
Old 02-24-2006, 03:33 AM   #5 (permalink)
DJMaze
Senior Contributor
 
DJMaze's Avatar
 
Join Date: Mar 2005
Posts: 743
DJMaze is on a distinguished road
Been there many times in PHP 4

function get_uri() is designed to prevent XSS exploits.
For example your website shows where people go and the uri has "><script>alert()</script>
then you know what might happen

The second is just plain and simple without security measurements.
DJMaze is online now   Reply With Quote