Where Nobody Knows You're a Virus

[MOP]

http://www.washingtonpost.com/wp-dyn...071100683.html

[txtaz]

Yep it's called XSS(Cross Site Scripting) or SQL injection depending on the backend of the site.

I just wrote an error handler that just sends the referral URL to a dummy "ooopppsss you have a problem" page if I detect any <script> inclusions or sql='somewthing'.

For the most part Microsfts XSS included libraries catches most attacks.