PHP Security: XSS & SQL Injection
255
How can I prevent SQL injection in PHP?
12867
How can I protect MySQL username and password from decompiling?
60295
Script breaking below MySQL queries, but no error being given?
31395
Exposing database IDs - security risk?
30906
Invoking a PHP script from a MySQL trigger
95323
Is there an equivalent of PHP's mysql_real_escape_string() for Perl's DBI?
30378
The definitive guide to form-based website authentication
75027
Why is using a mysql prepared statement more secure than using the common escape functions?
8240
How to secure database passwords in PHP?
107222
Exploitable PHP functions
4589
PHP validation/regex for URL
142082
CSRF, XSS and SQL Injection attack prevention in JSF
55886
SOQL Injection Prevention
42064
How do you Encrypt and Decrypt a PHP String?
86996
Best solution to protect PHP code without encryption
109042
Are there simple command line tools to decode a SQL Injection request string?
3705
How can I prevent SQL injection with dynamic tablenames?