protecting your website?

Out of context: Reply #7

  • Started
  • Last post
  • 11 Responses
  • BattleAxe0

    and read up on protecting your site from
    XSS -Under a cross site scripting attack an
    attacker injects code into your page (forum
    post, shout box, etc) that contains code that
    re-writes the page to do something nefarious

    CSRF-Under a cross site request forgery attack a
    site exploits another sites persistent user
    trust relationship to make something happen
     <img src=http://www.amazon.com/buy/my/book
    height=“1” width=“1”>
     Image tags can be used to trick a browser
    into making any GET request
     iFrames and javascript can be combined to
    trick a browser into making any POST
    request

View thread