Well, as it turns out Rasmus Lerdorfs filter made apache segfault, so I've disabled it again. XSS indeed!
On a lighter note, this work of art was created last night during the OSDC dinner: http://www.youtube.com/watch?v=NfVL_4uRLSo
Well, as it turns out there is a ready-made fix to some of the horrid inser-input-filtering problems I - and probably any PHP coder - encounter.
This morning was the first time I saw Rasmus Lerdorf speak and, although his views on web security want me to give up coding in general and become a potato farmer more specifically, he did point out some tools to make it a lot harder for a macilious user to abuse any web app you write.
Last year I properly attended my first Open Source Developers Conference, and this year's - held in Brisbane from November 26 to 29 - is coming up fast.
I'm planning to attend again this year and if you have any developers doing open source work or doing any open source work yourself, I can heartily recommend going. OSDC is a great place to pick up tick and trips and find out how to use your favourite tools and languages in unexpected new ways.
The theme for this year's conference is "Success in Development & Business".