// notes/

XSS

Coding tips and build notes by Mahir Faysal, a student web developer in Bangladesh: tested Python, HTML, CSS, JavaScript and PHP tutorials, plus notes from my Next.js and Gemini projects. Sample posts are marked and drafts stay in the admin area.

All notes Coding tips · 44 Learning notes · 4 Practice · 1

NOTE

Coding tips

PHP htmlspecialchars to Prevent XSS (Tested Examples)

Prevent XSS in PHP by escaping output with htmlspecialchars(ENT_QUOTES, UTF-8): reflected XSS demo, sticky forms, attributes, and the cases it does not cover.

October 6, 2026 · 11 min read · 0 views

// filter

You are inside a slice of the notes.

This view is only the category, tag, or search you asked for. Sample warnings still apply on any article that carries them. Drafts are still hidden. The full list is the learning notes page, which also explains how a note is written and why some posts are marked Sample.