Web application development - Information Security

security on the web, in addition to the xss last say, there are a lot of projects, including the upload image file, a site frequently used function, but this feature will have a lot of places to pay attention to, such as limiting the upload size, limited extension, set the folder read only, change the file name after upload, upload the file extension is for multiple file extension to fool the program check, such as. xxx.asp.gif ,. ...Web application development - Information Security