Member Avatar for csharplearner

Hello all,

I have this strange problem. I have a website where user can post messages to the site. I see from yesterday that someone is trying is manipulate with the forms.

I see some 1048 messages posted in a single minute to the site :( .
I used nl2br(htmlentities(-displaymessage)).. but it only captures html code. What about other scripts code that malicious users try to run.. I see no code or anything displayed in my website. The only thing i see is soo many messages posted to the site in less than a single minute.

Please help me :(.. how to avoid these kind of things...

  • 2 Contributors
  • 4 Replies
  • 132 Views
  • 5 Days Discussion Span
  • Latest Post Latest Post by csharplearner

Recommended Answers

All 4 Replies

Member Avatar for csharplearner

Use captcha.

Thanks for the quick reply. I shall use it definetly.

Can you please tell me how to display that javasrcipt code instead if allowing it to run in the website ..just like capturing html...

Member Avatar for buddylee17

Either disable html messages or look into using BBCode

Member Avatar for csharplearner

Either disable html messages or look into using BBCode

Thanx a Ton.

Be a part of the DaniWeb community

We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.