deonbell

never truss user input.

htmlspecialchar is good php function.

Looks at parameterized sql statements to avoids sqlinjection. Much old information for sql still on web shows old ways of things. that is dangerous.

__________________