Homework Help

[Buffy]

Expect this thread to be bumped for the next three years...and thanks in advance.

Can someone direct me to a website, or series of websites, that would intelligently allow me to answer this question:

Suggest methods that organizations could implement to prevent the A1-Injection(Structured Query Language (SQL) Injection) and A2-Cross Site Scripting (XSS)in software applications.

Thanks!

edit: Google - fu go. This is a well written explanation so far: http://www.hpenterprisesecurity.com/...alidation.html

[rezn0r]

how advanced does the answer need to be? SQL injection could be as simple as "keeping untrusted data separate from queries", etc