In this second excerpt from Advanced PHP Programming, George Schlossnagle offers advice on how to defend against both attacks and carelessness.

How to Inject Attributes Into Code Using PHP. HTML is a markup language rather than a programming language. You can specify how you want text to appear on a Web page with HTML, but you can't make ...