my site uses php and sql..need help on securing my website?

i mean want know can learn types of security issues , how prevent them ??...like sql injection,xss etc. thank in advance...:)....

if using php/mysql code dreamweaver uses, go dreamweaver santizes input , helps prevent sql injection.  **note** true dreamweaver 8.02 , above.  older version of dreamweaver did not prevent sql injection well.  however, if modify dreamweaver code, have make sure sanitizing input.  code @ top of each page in regards magic quotes santizer.

 

in regards xss, have sanitize output.  this: <?php echo htmlentities($row_recordset1['column_name],ent_quotes);?>  please see http://php.net/manual/en/function.htmlentities.php better understanding of php function.

 

some other things can if running on apache mod_security sql injection attacks.  can @ htmlpurifier http://htmlpurifier.org/ further xss attacks.

More discussions in Develop server-side applications in Dreamweaver

adobe