|
Be sure the guestbook you get validates user input properly - there are lots of simple guestbook scripts that just simply store exactly what the user entered in a DB then write it right back out to the page. People can exploit this by putting code into the field (namely javascript) which could be malicious, advertising or just plain annoying.
You could write a guestbook yourself in ASP.NET - it's not a hard script to do. ASP.NET will automatically validate your code for you to check for people trying to post scripts.
Also, you might want to mask the e-mail address of the poster - firstly to protect them from spam, secondly so that Mugu Guymen don't take over your guestbook (Nigerian scammers who harvest e-mail from guestbooks and post messy 'MUGU MUGU MUGU MUGU' posts all over the place. Read more on Google)
__________________
Minaki Serinde MCP
"Wow, Linux is nearly on-par with Windows ME!"
Please login or register to view this content. Registration is FREE | Please login or register to view this content. Registration is FREE
|