Patching Sql injection and cross site scripting by ravi rajput

12. <?php
$str = addslashes('What does “hacking" mean?');
echo($str);
?>
• Result : What does “hacking" mean?
• It adds before “ ‘
?>

15. • Simply use htmlentities()

16. • Nope
htmlentities() with
ENT_QUOTES
• Var name = ‘<?php
htmlentities($_GET[‘username’],ENT_QUOTES);?>’;

17. • Php AntiXss