PHP打印搜索关键字[重复]

Question

This question already has an answer here:

• Protection against XSS exploits? 4 answers

I have a PHP security question. As I am creating a PHP Webproject, I need to implement a website search and I am a little concerned about it's security. A while ago, I slightly remember hearing something about, that printing the keywords searched by the user (somewhere on the page), might cause that the website could get hacked. Do any of you guys know anything about that?

Thanks for all the answers.

---

BTW: I already thought of getting rid of all eventually inserted HTML tags.

</div>

Answer 1

You have to take into consideration Cross site attacks as well as HTML injections and SQL injection when the user is adding the tag.

You should read:

• How to prevent code injection attacks in PHP?
• How can I prevent SQL injection in PHP?
• How to prevent XSS with HTML/PHP?
• Survive The Deep End: PHP Security