Show HN: My first webapp. Yikes! Read and Post Stories anonymously

Re:Show HN: My first webapp. Yikes! Read and Post Stories an... by joshschreuder on Friday August 31, 2012 @12:25AM (#4458252)

Probably needs a Recaptcha or similar (http://www.google.com/recaptcha) on the form to slow down those pesky webspammers a bit. Maybe think about nofollowing (http://en.wikipedia.org/wiki/Nofollow) any links in the story too, so you don't get used as SEO juice. My link didn't work out too well either (changed to http://www.sam-the-man.com/yikes/www.google.com)

Also, make sure to filter your user input to avoid XSS attacks. I just posted a story and your page will print HTML and JS verbatim, meaning I could do malicious things. See here: https://www.owasp.org/index.php/Cross-site_Scripting_(XSS)

Apart from that, looks pretty good, well done :)

[ Parent | on HN ]

Re:Show HN: My first webapp. Yikes! Read and Post Stories an... by samjc on Friday August 31, 2012 @12:33AM (#4458274)

Thank you very much. I was hoping that the mysql_real_escape_string() function would be enough, but it did seem too easy.

I will definitely look further into it! Thanks again

[ Parent | on HN ]

Re:Show HN: My first webapp. Yikes! Read and Post Stories an... by joshschreuder on Friday August 31, 2012 @02:14AM (#4458523)

I'm not a PHP / MySQL guy, but this might help: http://stackoverflow.com/a/110576

[ Parent | on HN ]