Google for: - sql injection - register_globals - XSS Attack - html injection This will give you a lot of good tips.