清理输入$ _POST [复制]

Question

This question already has an answer here:

• How to prevent against XSS and SQL injection [duplicate] 4 answers

Sadly my student website just got hacked. Someone insert script tag and stored in the database. Database also been published in a website call pastebin. I just took down the website. Can someone show me how to fix this quick.

</div>

Answer 1

Use a combination of filters and prepared statements.

http://php.net/manual/en/function.filter-input.php
http://php.net/manual/en/pdo.prepared-statements.php