links for 2008-04-03

Strategies for handling strings in user input to avoid security problems such as cross-site scripting.

Not many people realise that all the commands given to you by TextMate are written as simple scripts, editable by anyone, and in any language. PHP is a widespread language, but not many people are accustomed to using PHP for writing shell scripts