Free site script software for windows

Microsoft IIS4 "Cross-Site Scripting" Vulnerability Patch (MS00-060) is a professional and smart patch which eliminates security vulnerabilities in the Microsoft Internet Information Server.

The vulnerabilities could allow a malicious Web site operator to misuse another Web site as a means of attacking users. This vulnerability, known as Cross-Site Scripting (CSS), results when Web applications don't properly validate inputs before using them in dynamic Web pages. If malicious Web site operators were able to lure a user to their site, and had identified a third-party Web site that was vulnerable to CSS, they could potentially use the vulnerability to ""inject"" script into a Web page created by the other Web site, which would then be delivered to the user.

The net effect would be to cause the malicious user's script to run on the user's machine. The vulnerability can affect any software that runs on a Web server, accepts user input, and blindly uses it to generate Web pages. Microsoft recommends that all vendors check their products to see if any are affected by the vulnerability, and initiated a check of its own products, as well. Several features in IIS were found to be affected--some were found by Microsoft internal teams, and others were identified by customers--and this patch eliminates all of them.

Windows 2000 IIS5 Security Patch: IIS Cross-Site Scripting Vulnerability Q275657 is released as a customizable and helpful patch that eliminates a vulnerability in Microsoft Internet Information Server.

However, an additional variant of the vulnerability was subsequently identified, and on October 30, 2000, the bulletin was updated to advise customers of the availability of an updated patch.The updated patch eliminates all known variants of the vulnerability.

Requirements: Windows 2000

FFA Script 3.0 brings a very tractable and powerful program, written in PHP, for you to accept link submissions on your Web site. The FFA Script has an excellent administration panel. It does not require any kind of database to run the FFA Script.

Enhancements:

• Supports reversible colored links, and it also supports the opportunity to use wildcards when blocking bad e-mail addresses.
• A feature more in this version is the opportunity to make it optional to use an e-mail address when submitting a link.