php - How can I filter metacharacters from user input in xss attack? -


on site on admin login page if this

http://www.domain.com/admin/index.php/%22onclick=document.location="http://www.google.com"> 

and click somewhere page redirects. read need filter metacharacters, after hours of googling still can't find out how can stop this. above see isn't doing get or post. how can block this?


Comments

Popular posts from this blog

python - Scipy curvefit RuntimeError:Optimal parameters not found: Number of calls to function has reached maxfev = 1000 -

c# - How to add a new treeview at the selected node? -

java - netbeans "Please wait - classpath scanning in progress..." -