[pmapper-users] Σχετ: prevent xss

2011-05-28 Thread Andreas Douvalis
Hi Armin. You helped me a lot because you remind me that php.ini control variables (post, get, requet) ass well. My php.ini configuration is for security reasons : allow_url_fopen = Off allow_url_include = Off Let me be more specific with my problem. I work wmsclient plugin (I suppose you rem

Re: [pmapper-users] prevent xss

2011-05-28 Thread Armin Burger
well, a common practice in programming is that comments are valid for lines following below. Just check which line is below the comment you mentioned and you might get an idea. In practice it is more or less obsolete since this should only be required if the ini entry "register_globals" is enab

[pmapper-users] prevent xss

2011-05-28 Thread Andreas Douvalis
Hi   At the beginning of many files (including map_default.phtml and map_uilayout.phtml) there is one comment :   // prevent XSS   I suppose that the above comment means that we should add functions for avoiding xss attacks. That means that pmapper has not developed any special function for the ab