PHP Under Attack

• Exploits the trust a user has for a particular site

• Generally involves Web sites that display foreign data (Web mail, forums, syndicated content, etc.)

• Can be anything - executing malicious scripts, stealing cookies, etc.

• Popularized by the media