Checking for HTML injection in all your comment fields.
When checking for html injection in your blog comments, unless you're moderating your comments, remember to check all the fields, not just the body and strip the html. I was reading some old blog entries of some friends (cough* Kevin's, sorry bub!) and noticed quite a bit of spam in the comment titles. The spammer had used a link the comment title. Unfortunately, the link doesn't have a rel="nofollow" attribute either, so the blog is just contributing to the spammers ranking.
There are no comments for this entry.
[Add Comment]