PHP data validation : <p>I am trying to create data validation code in PHP and was wondering how to go about that. I understand that someone can Inject code or scripts through the input boxes on my website. I am preventing entrance of characters such as <code>&lt; " / \</code> but I don't know what else to use. For example I am accepting data into a $var and if someone enters echo <code>"&lt;div style = "position: fixed; height: 1000px; width: 100%" &gt;&lt;/div&gt;"</code> whatever this will do, it will still run if I accept it into my $var right and run the code? Unless the host has mechanisms to prevent that</p>
