PHP Tutorial (& MySQL) #18 - XSS Attacks

[@shoaibhamza4371]

There is no other teacher who can explain better than you 😊

[@mohameddhik5625]

Still the best php course in 2022

[@fahrifoxtrot-whiskey9242]

VERY IMPORTANT! Thank you!

[@emerino1978]

Hi there, Very interesting tutorial! Thank you so much, i had subscribed and like this tutorial. I feel like i'm really learning PHP with your tutorials. I Really appreciate your effort! Mr. Merino

[@FerMeister]

1:42 shots fired

[@ИгнатМедиамагнат]

you are great in explaining stuff. Can you make a video about prepared statements for preventing sql injections?

[@adedokunadekola6201]

i need that too

[@samuelamare3080]

I used chrome and it led me to your website, when I filled the javascript code and submitted it! What does it mean?

[@chandikalakshan468]

Very useful series for me :)

[@helicopterV911BAODAP]

helpful tutorials for beginners!

[@amitpatil3380]

Shaun, U are just awosome!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

[@huckfaters]

Great work Shaun. Would you create laravel series later on?

[@NetNinja]

Will be doing sometime soon, yeah :)

[@VadimBesedin]

Waiting for it. Shaun, with your talent of clear and simple explanation it's going to be a hit! Thank you for your time, help and knowledge.

[@KelvinZak]

its very hard to find a better teacher

[@ahmedbakhach2490]

and should we do this whenever we have an input field? suppose we have a contact form/a comment section or login page or whatever.

[@MrShivamgautam1]

What about SQL injection?

[@NetNinja]

I'll talk about it later in the series :)

[@Avean]

How do you deal with article systems where you have a text editor. Wouldnt this protection stop it from working properly? Like in this youtube comment i can still type . How do they do it

[@RameenFallschirmjager]

Great tutorial as always. How does this method of safety compares to prepared statement?

[@mauricevolaski2937]

I think prepared statements are to prevent sql injection attacks.

[@Zudasworld]

htmlspecialchars does not stop this attack, I am a well known security researcher. You simply have to change a couple things and the code will run, this is a way to instill a false sense of security while making an insecure site. I'd be happy to chat with you on how to write code that XSS should not fire on.

[@MrIshumaru]

haha, he called them morons, brilliant

[@rembrandt702]

How come you are not using - htmlentities($itemName, ENT_QUOTES, 'UTF-8')?

[@MustafaBirsoz]

Kiiiiing of the ninjas

[@mostafa1845]

So XSS attack only works on yourself? I mean why would someone paste code to a form

[@mostafa1845]

Oh i get it now

[@RoanElvis]

@@mostafa1845 can u explain it because that's what i'm thinking lol

[@mostafa1845]

@@RoanElvis when he post javascript in a message or a comment, the code will run when someone opens that message

[@rise5544]

@@mostafa1845 if you have like an image uploader site and you can add comments then everyone can see like the alert script so yeah

[@RoanElvis]

@@mostafa1845 I think I understand, thanks

[@premKumar-il1qy]

chrome does redirect when I do this attack.BTW, I'm following your tuts since 2017 your contents are awesome.

[@LovePromoter]

Genius

[@SVTechno]

But my chrome redirected me 😢😢😢

[@e0a22f3]

How could one bypass this?

[@kacper_robloks]

1:28 'coronavirus'?

[@Martin958]

I found Google Chrome let me redirect as well.