• Accessibility
• Site Map

You are in: home / community

Leo's Profile

About Me:

Top 5 Blog Posts

Allowing HTML and Preventing XSS

• 14 Mar 2007
• 58 Comments

My Amazon Anniversary

• 15 Mar 2007
• 43 Comments

addslashes() Versus mysql_real_escape_string()

• 22 Jan 2006
• 59 Comments

The Dangers of Cross-Domain Ajax with Flash

• 24 Sep 06
• 18 Comments

Cross-Domain Ajax Insecurity

• 09 Aug 06
• 26 Comments

Top 5 Articles

Foiling Cross-Site Attacks

• 14 Oct 2003
• 66 Comments

Security Corner: Cross-Site Request Forgeries

• 13 Dec 2004
• 61 Comments

The Truth about Sessions

• 15 Dec 2003
• 66 Comments

Guru Speak: How to Avoid "Page Has Expired" Warnings

• 21 Oct 2004
• 45 Comments

Guru Speak: Storing Sessions in a Database

• 14 Dec 2004
• 41 Comments

Books and Work

• Essential PHP Security (2005 O'Reilly)
• HTTP Developers Handbook (2003 Sams)

• OmniTI:
  Web Applications & Internet Architectures
• OmniTI:
  Web Application Security Services