[Solved] PHP coding standards for user entered data [closed]
You should generally try to ‘escape’ all special characters when dealing with user supplied input. If you find certain characters are causing havoc with your system then you can remove them like so: <?php $BadChars = array( “‘”, // Single quote – can harm SQL queries “%”, // Percent sign – can harm SQL queries … Read more