You should always keep the following guidelines in mind when writing code in terms of web applications:
Never trust user input – Assume that every user is evil, until you have confirmed the opposite. You should always strongly validate user input. Write your validation code in a way that it verifies input against …