safe web script

[rockwood]

injections = PDO or Mysqli with bind values or params

XSS = make your GET value as int or sting ,htmlspecialchars(),sprintf(),int();

this is enough friends ?

[Razor42]

Show some example of how you would actually use them....

[Guest]

There are various exploits in bound vars, you need to set some specific options for PDO to secure it.

[a_bertrand]

There is A LOT LOT more security issues than simply SQL injections and XSS ;)

So no you are not covered with only that rockwood.

You may check: https://www.owasp.org/index.php/Category:Attack

That gives a bit more ideas of what can be wrong.

[rockwood]

Thanks It will be Helpful

Edited June 16, 2013 by rockwood