Best way to avoid code injection in PHP ??

Hi experts,

Plz, plz suggest me the best ways to avoid code injections in PHP

Thanks

 

install snort if you have your own server

 

No, I don't have my own server.
I just want some guidelines that need to keep in mind while coding.

Thanks

 

one simple rule, sterilize all inputs coming from user ..

 

I'm sure there are online tools to check your code for vulnerabilities. if it's a really important site or if you get a lot of hackers visiting, I suggest you have your own server from home or colocate with a cheap provider.

 

acunetix is the tool i have recently learned about if you are looking for vulnerabilities detector tool.

 

use stripslashes($input) and html_entities($input) functions...
2 powerful functions..
and lastly. use str_replace to replace javascript functions just like this:
str_ireplace('javascript','java<b></b>script',$input);
this will disable all javascript functions..
my 3 cents