PHP Developers Network

I am beginner and I am struggling with kind of attack called (XSS). I tried this codes on my [url]127.0.0.1/myweb/home.php?u=paul[/url] and then this is the result: [url]127.0.0.1/myweb/home.php/"><script>alert('hacked')</script>/>"><script>alert("XSS")</script>&?u=daniel[/url]. And now it appears that my web page is been hacked, I do not have any security or validation code to prevent this so I am looking for sample codes, or advices to apply on my application thank you.

Start with this: http://php.net/manual/en/function.htmlspecialchars.php

_________________

_________________

_________________
(#10850)