Web Security: Common Vulnerabilities And Their Mitigation - Sanitizing input - still not done

The video tutorial discusses preventing cross-site scripting in PHP by using the HTML special chars function to convert special characters into HTML entities, making them safe to render in browsers. It emphasizes the importance of sanitizing user input before storing it in databases and introduces a 'clean' function to perform basic sanitization. The tutorial also covers various PHP functions like trim, strip slashes, and strip_tags to sanitize input effectively.

What is the purpose of the HTML special CHARS function in PHP?

Explain how HTML special chars convert special characters to HTML entities.

What are the potential risks of not sanitizing user input?

Why is it important to sanitize user input before storing it in a database?

Describe the function of the trim function in sanitizing user input.

What does the strip_tags function do in PHP?

How can you render HTML tags safe in user input without removing them?