Input Sanitation Checks Fields
Here is the list of characters that I need to omit in all my input field page entries to protect my self from hackers and malicious scripts..
this is necessary for 4 pages on my website which have input fields.
[1] | (pipe sign)
[2] & (ampersand sign)
[3] ; (semicolon sign)
[4] $ (dollar sign)
[5] % (percent sign)
[6] (the at sign -) – this is necessary to any field except from fields where an email address is needed
[7] ‘ (single apostrophe)
[8] ” (quotation mark)
[9] \’ (backslash-escaped apostrophe)
[10] \” (backslash-escaped quotation mark)
[11] <> (triangular parenthesis)
[12] () (parenthesis)
[13] + (plus sign)
[14] CR (Carriage return, ASCII 0×0d)
[15] LF (Line feed, ASCII 0×0a)
[16] , (comma sign)
[17] \ (backslash)
[18] ) (closing parenthesis)
[19] * (Sanitize input to exclude context-changing symbols such as)
B. To fix the <%00script> variant see MS article 821349
C. For UTF-7 attacks:
Log Forging:
[1] CR (Carriage return, ASCII 0×0d)
[2] LF (Line feed, ASCII 0×0a)
[3] BS (Backspace, ASCII 0×08)
Post similar project on sosexpert.com
Related Projects
Comments
Email Subscriptions
-