Contains HTML

[transparent]

Has any body written any code to check to see if a string contains HTML or SQL?

I want to ensure that my users dont try to inject HTML, Javascript or SQL into my sites content.

 

[ca8msm]

Users shouldn't be able to add Javascript or HTML into your site by default (this can be changed by setting the validateRequest tag in the page directive).

As for SQL, you should use parameters when executing SQL commands as this will prevent against SQL injection attacks.

So, basically, you shouldn't ever have to worry about it if you have coded your site correctly and with this in mind.


____________________________________________________________

Need help finding an answer?

Try the Search Facility or read FAQ222-2244 on how to get better results.