Discussion on: Cross-site Scripting (XSS) and ways to prevent it in PHP applications

[Paul Dudink]

I believe it is recommended to use filter_var nowadays. Apart from XSS type of filtering it's also great to check for example an emailaddress, instead of using a regex. See all types of filters.

[Giulio "Joshi"]

I do agree, also using filter_input() and filter_input_array() should be preferred to using superglobals.

<?php
$customerEmail = filter_input( INPUT_GET, 'user_email', FILTER_SANITIZE_EMAIL );

[Bentil Shadrack]

Thanks for the input

[Bentil Shadrack]

That's imperative to do.
Thanks for adding👏