php

Preventing cross-site-scripting (XSS) vulnerability

Recently i came across a report at xssed.com, about ebharatjobs.com being vulnerable to cross site scripting (XSS). That report was filed way back in 2009, and we have already fixed that when we upgraded www.ebharatjobs.com in 2010.

I wanted to share the code we used to check the input from users to possibly prevent XSS vulnerability.


// cross-site-scripting (XSS) vulnerability
$q = $_GET["q"];
//remove the script tag and its contents

SearchPropertyIndia.com - Find Real Estate Properties with ease

SearchPropertyIndia Screenshot

SearchPropertyIndia.com is a vertical search engine targeted to the people looking for properties such as Flat / Apartment, Bungalows, Villas or Land, plots. Visitors can also search for properties available for rent only.

Searching property online can be a tiresome process, and at times you will not be able to find the right kind of property you might be looking for. To make this process easier we have come up with this vertical search engine.

SearchPropertyIndia.com crawls real estate websites, and indexes them. And then people can search them based on city, type, etc.

eBharatJobs Performance Updates

eBharatJobs.com is one of India's most used job search engine. We continuously keep working on improving the user experience.

Recently we have been working heavily on optimizing the load speed of ebharatjobs. Google has announced that they are now considering page speed for ranking websites, so it becomes very important for websites to improve their loading time.

We first introduced APC for caching the files in memory. It helped a lot, since were were using few files and caching them in memory helped much more.