The site is in PHP, on my site I have a url which is something like this::
http://localhost/test.php
The above url works really fine but when it is changed to something like below then it does not work properly:
http://localhost/test.php/#' onmouseover=prompt(962488) //
The css disappears and almost everything goes awry. What should I do so that above malicious code does not create any problem ?
