Skip to content

Glossary: PHP Basics

XSS (cross-site scripting)

Also written: XSS, cross-site scripting

An attack that sneaks code, such as a `<script>`, into a page through unescaped input so it runs in a visitor's browser. Escaping output prevents it.

Where the book teaches it

Related terms

escapinghtmlspecialchars()