How do you sanitize data in $_GET -variables by PHP?
I sanitize only one variable in GET by strip_tags. I am not sure whether I should
strip_tags
You must sanitize all requests, not only POST as GET.
You can use the function htmlentities(), the function preg_replace() with regex, or filter by cast:
$id = (int)$_GET['id']; ?>
[]'s