Category: PHP · Code Snippets

Placeholders rather than interpolation. This is the whole of SQL injection defence in PHP.

PHP php pdo security sql chris

htmlspecialchars with the flags spelled out, because the defaults have changed between versions.

PHP php security xss templates chris

password_hash picks the algorithm and the salt. Never store anything a hash function can reverse.

PHP php security passwords chris