HTML is a markup language rather than a programming language. You can specify how you want text to appear on a Web page with HTML, but you can't make decisions or change the contents of the page ...

In this second excerpt from Advanced PHP Programming, George Schlossnagle offers advice on how to defend against both attacks and carelessness.