New answers tagged

1

After upvoting @pieter's answer.... In recent time I came to the realization that it is much better to handle "bad" data gracefully when it is used (usually it means escaping, but also validation) than at input time. Data corruption can happen not only because of some rouge process "shitting" over your data, but also when the enviroment has changed and the ...


1

Never leave anything to chance, always sanitize, escape and validate all data coming from forms and super globals like $_GET and $_POST according to your requirements and the data type you are expecting. It is always good to set your code up in a way so that should your validation fail, you do not unnecessarily run scripts and functions. Have some kind of ...



Top 50 recent answers are included