I recently asked the question "https://stackoverflow.com/questions/18989544/defending-against-xss-and-sql-injection-for-a-php-beginner", which has been closed as too broad.

I'd like to edit the question so that it can be reopened and/or have it migrated to Programmers Stack Exchange. What is the best way to go about doing this, and does it belong on programmers.se?

  • 1
    "What are the most common attacks in simple web applications, and how do I defend against them?" -> owasp.org/index.php/Category:OWASP_Top_Ten_Project
    – yannis
    Sep 24, 2013 at 19:15
  • 2
    "What should I know" type questions are fundamentally too broad for StackOverflow, and most likely Programmers as well. Did you go through all the links provided in the comments in depth? Sep 24, 2013 at 19:15
  • I've narrowed the focus of the question.
    – bwDraco
    Sep 24, 2013 at 19:20
  • 1
    @DragonLordtheFiery Now your question is a dupe of this: stackoverflow.com/questions/60174/…
    – yannis
    Sep 24, 2013 at 19:29
  • I wish there was a community FAQ about this, and I wish this was easier to understand for beginners...
    – bwDraco
    Sep 24, 2013 at 19:30
  • A community FAQ for what, exactly?
    – Oded
    Sep 24, 2013 at 20:05
  • @Oded: PHP security basics.
    – bwDraco
    Sep 24, 2013 at 20:42
  • 1
    @DragonLordtheFiery Books can be written on the subject. It's well beyond the scope of a single SO question. If you really want to know all about it go buy a book about it, rather than asking on SO.
    – Servy
    Sep 24, 2013 at 20:48
  • 1
    A community maintained PHP FAQ already exists: stackoverflow.com/tags/php/info
    – yannis
    Sep 24, 2013 at 21:14
  • 1
    I'm working on a PHP security reference on my personal web site: fierydragonlord.com/reference/php-security.php. It is a work in progress but it will be based on the OWASP material and Stack Overflow answers.
    – bwDraco
    Sep 24, 2013 at 22:14
  • Because the old Meta Stack Overflow is now Meta Stack Exchange, I am voting to close this question as it is specific to Stack Overflow.
    – bwDraco
    Apr 22, 2014 at 0:35

1 Answer 1


I agree that the topic of the question was too broad. I don't think that Programmers.se will receive it any better.

You were given three links in the comments of your question on the main site. Check those out.

You already know what terms to search for, and it appears that you're already researching it from your comment on the main site:

I am aware of stuff like mysqli_real_escape_string(), but I want to see examples on how to use it.

You're on the right track! Now find some examples and read the explanations of how/why they work to stave off SQL injection.

If you get stuck, then come back to the main site, post code showing what's bugging you, and you'll get help.

The more specific the questions, the better.

  • Thanks for the guidance. I'll come back and post another question if I run into problems.
    – bwDraco
    Sep 24, 2013 at 20:43

Not the answer you're looking for? Browse other questions tagged .