1. Chapter 13 Security Methods Part 2

2. xss.php Script 13.4 on page 419 http://csweb.hh.nku.edu/csc301/frank/ch13/x ss.php http://csweb.hh.nku.edu/csc301/frank/ch13/x ss.php ch13\xss.php Enter alert(“Ha!”);

3. XSS Attacks It could create a pop-up window Steal cookies Redirect the browser to other sites.

4. htmlentities() Turn problem characters into HTML entities (taken literally. No special meaning.) & -> & “ -> " < > -> >

5. strip_tags() Removes all HTML and PHP tags

6. calculator.php Script 13.4 on pages 422-423 http://csweb.hh.nku.edu/csc301/frank/ch13/c alculator.php http://csweb.hh.nku.edu/csc301/frank/ch13/c alculator.php ch13\calculator.php

7. filter_var() if(filter_var($var,FILTER_VALIDATE_INT) if(filter_var($var,FILTER_VALIDATE_INT, array(‘min_range’ => 1, ‘max_range’ => 120))

8. Validation Filters FILTER_VALIDATE_EMAIL FILTER_VALIDATE_FLOAT FILTER_VALIDATE_INT FILTER_VALIDATE_URL