Tag: cross-site scripting

Neal Poole – Cross-Site Scripting via Error Reporting Notices in PHP
Though to be fair you probably shouldn’t be using display_errors in a production site.
August 18, 2011