Improper input validation: Difference between revisions

Revision as of 22:07, 4 March 2006

Revision as of 22:09, 4 March 2006

Line 31:

* [[Cross site scripting]] - unsafe output of input strings

* [[Directory traversal]] - concatenating strings to create a filename is not a good idea

* [[SQL injection]] - concatenating strings to create a SQL statement is not a good idea

[[Category:Security exploits]]