apparently, some of our websites have been hacked by a hack bot. The reason: bad input sanitzation. Our boss is giving us this file to put on all our servers to secure them: http://pastebin.com/0gJ19TQGPersonally, i just do this on my personal websites: filter_var(mysql_real_escape_string($_POST['Nom']), FILTER_SANITIZE_STRING);. So you tell me, which one is better and why?
which input sanitization function is better?
php;security
Input sanitazion isn't just about including a file and you're done! It requires extensive knowledge about the system and starts with designing the processes accepting the data. Neither solution will solve all your problems. It might defend some attacks but certainly not all!