Monday, October 19, 2009

66% websites infected with cross site scripting/SQL injection attacks

Kinda bogles the mind, doesn't it? 66% of websites are infected. Most of the time, it is done for information.... a kind of ID theft. And is apparently easy to do. However, this would drop dramatically if coders would code with security in mind. Using open source apps that are more 'open' are really beginning to scare me. Guess I will have to learn to be a better coder !!!!

Here is the article:

http://www.technewsworld.com/story/Ridding-the-Web-of-the-XSS-Scourge-68410.html

2 comments:

  1. This is very scary to me. I have code many websites. I follow my own rules on this, which are:
    Client side AND server side validations on all controls
    NO hard coded sql

    Still, I wonder how vulnerable my stuff is

    ReplyDelete
  2. I am by no means a programmer. I have been using the NoScript add-on in firefox forever. It stops all script activity on the page until you allow it, either temp or permanently. I never knew that XSS was this prevalent. The numbers of 80-90% of all sites is very unsettling. I thought it was mostly porn sites, hack sites, etc.

    ReplyDelete