XSS prevention in PHP [duplicate]

Answer 1

There are lots of PHP functions that can assist you in preventing XSS attacks. Take a look at these:

strip_tags

http://php.net/manual/en/function.strip-tags.php

htmlspecialchars

http://php.net/manual/en/function.htmlspecialchars.php

Answer 2

http://www.owasp.org/index.php/Category:OWASP_Enterprise_Security_API

Answer 3

Security is not a product. It's a process.

If you rely on a library for security you're doomed to being attacked one time or another.

Anyway, you could sanitize your inputs with standard php functions (i.e. htmlspecialchars())

Answer 4

Theres alot of good answers on google, first one I found; http://codeassembly.com/How-to-sanitize-your-php-input/

My main advice would be to consider every input as a direct attack.

So convert to html characters. Add slashes.

Answer 5

htmlspecialchars()