c# - Which is the best way to Prevent Bad word entry in Discussion module in my site -

-

in web site hackers entering bad words. best way prevent this?

i using asp.net, c# , sql server resources.

  1. check bad words in form backend ?
  2. check bad words in javascript?
  3. check bad words in stored procedure before insert?

i think first method best.

please tell optimized code check

now using method 

    var filterwords = ["fool", "dumb", "couch potato"];     // "i" ignore case , "g" global     var rgx = new regexp(filterwords.join(""), "gi");      function wordfilter(str) {                       return str.replace(rgx, "****");                }      // call function     document.write("original string - ");     document.writeln("you fool. why dumb  <br/>");        document.write("replaced string - ");     document.writeln(wordfilter("you fool. why dumb"));

reality can’t prevent 100% of bad words. i’d go two-step verification on server side (js can disabled , sql not suitable handling this)

  1. create list of common bad words used – catch 80% of inputs.

  2. create list of patterns suspects signal manually verify these.

    this patterns such as

    • a) word contains 2 or more ** characters
    • b) word contains letters , 1 of following characters 0,3,$, , others

in time you’ll have keep both lists updated. again, not solve 100% of cases catch , fix 95% if implemented properly.


Comments

Post a Comment

Popular posts from this blog

c - How to retrieve a variable from the Apache configuration inside the module? -

-
i'm building custom apache module. how retrieve variable apache configuration inside module? see variable "some_var_config_from_apache_or_htaacess" inside apache module: /* source: http://people.apache.org/~humbedooh/mods/examples/mod_example_1.c */ /* include required headers httpd */ #include "httpd.h" #include "http_core.h" #include "http_protocol.h" #include "http_request.h" static void register_hooks(apr_pool_t *pool); static int example_handler(request_rec *r); /* define our module entity , assign function registering hooks */ module ap_module_declare_data example_module = { standard20_module_stuff, null, // per-directory configuration handler null, // merge handler per-directory configurations null, // per-server configuration handler null, // merge handler per-server configurations null, // directives may have httpd register_hoo
Read more

c# - Constructor arguments cannot be passed for interface mocks -

-
when debug code , read line mocklessonplannerafactory creation error: constructor arguments cannot passed interface mocks. var mockschoolclasscodeservice = new mock<ischoolclasscodeservice>(); var mockdateservice = new mock<idateservice>(); var mocklessonplannerafactory = new mock<ilessonplannerafactory>(mockdateservice.object); var mocklessonplannerbfactory = new mock<ilessonplannerbfactory>(mockdateservice.object); var service = new timetableservice(mockunitofwork.object, mocklessonplannerafactory.object, mocklessonplannerbfactory.object, mockschoolclasscodeservice.object); my timetableservice accepts instances of interface type only. mocklessonplannerafactory , bfactory... want in constructor idateservice passed. what wrong code? the clue in error message "constructor arguments cannot passed interface mocks." the mock created interface have default constructor because interfaces don't have constructor. remember mockin
Read more

python - malformed header from script index.py Bad header -

-
i want run python code in apache2(ubuntu 14.04) server. have followed these steps , getting error: step 1: configuration 1: have created directory , file under /var/www/cgi-bin configuration 2 : have edited /etc/apache2/sites-available/000-default.conf alias /cgi-bin /var/www/cgi-bin <directory "/var/www/cgi-bin"> options indexes followsymlinks execcgi addhandler cgi-script .cgi .py allow </directory> <directory /var/www/cgi-bin> options </directory> step 2: and python script is: index.py #!/usr/bin/env python import cgi; import cgitb;cgitb.enable() print "content-type: text/plain\n" print "<b>hello python</b>" step 3: when ran through chrome browser using: url : http://localhost/cgi-bin/index.py step 4: i getting error in error-log malformed header script 'index.py': bad header: hello python you should end header \r\n, must print out yet \r\n signal body coming. (i
Read more