Kap7 Security

Question 1

How to avoid Command Injection?

Answer 1

Avoid external command calls, Assume all input is malicious and Assign permissions that prevents from accessing/opening
privileged files (if not required)

Question 2

How to avoid SQL Injection?

Answer 2

Input Validation, Escaping, Bound Parameters (Prepared Statements), Limit user privileges and segregate users, Error Reporting

Question 3

How to avoid Cross-Site Scripting?

Answer 3

Escaping, Recommendation, Prevent inline JavaScript with Content Security Policies