1. Validate Input You must validate all inputs that come from clients as a way of preventing injection attacks, SQL attacks, and more. Always Specify Specify the character set to be used for the input, such as UTF-8, and canonicalize (encode to a common character set) before validating.

Read full news article on Dzone