Attempted exploit?

Question

I saw that my nopCommerce site had a logged search for:

ADw-script AD4-alert(202) ADw-/script AD4-

I\'m a bit curious though what they were try

Answer 1

If you want to be safe from these types of Injections, you must specify a Content-Type.

Try to put the Content-Type in headers instead of meta tags if possible. If you want to do it in php, you can do

at the top of your php application. If for some reasons you can't do it, you can put it in your meta tags:

    
        
        ....Rest of your page