usight.com - what's the deal?

[jlee]

Apparently my grandfather spent a bit of cash setting an account up with uSight.com...but I don't know how legit they are. This is from their FAQ:



<<
18. Why did my quotation marks ["] disappear when I published my page?

Since quotation marks are used in several programming languages we remove them from your site for security reasons. Quotation marks in your site can make it vulnerable to hackers. You can still use the apostrophe ['] key and put two of them side by side to imitate quotation marks without the security risk, and they look exactly the same.
>>



Quotation marks are also used in HTML...not to mention normal text characters are also used in programming languages. I've never heard of quotation marks causing security vulnerabilities in websites...granted, I'm no professional webmaster, but I have been designing sites for years now. What do you think about the whole thing?

 

[gopunk]

i can see where they're coming from, but i think it's a bit misguided. then again, i'm no expect either... if it's just html then they're being paranoid. if they're talking about cgi forms or some scripting thing, then maybe they have a case.

edit: or maybe they're worried about protecting the client from him/herself... because if you have a database connection or something, and you don't use quotation marks properly, it could let the world see your database username and password. stuff like that...

 

[jlee]

Hmm..maybe, I guess - thanks

Anybody else have a comment or 2?

 

[b0mbrman]

<< edit: or maybe they're worried about protecting the client from him/herself... because if you have a database connection or something, and you don't use quotation marks properly, it could let the world see your database username and password. stuff like that... >>


Yup. That's what I'd say

 

[jlee]

<<

<< edit: or maybe they're worried about protecting the client from him/herself... because if you have a database connection or something, and you don't use quotation marks properly, it could let the world see your database username and password. stuff like that... >>


Yup. That's what I'd say >>



Ok - thanks guys..