In this second excerpt from Advanced PHP Programming, George Schlossnagle offers advice on how to defend against both attacks and carelessness.

One of PHP's strengths is the ability to easily inject variables, values and attributes into HTML code to create dynamic Web pages.

Attackers were able to place malicious code in the PHP central code repository by impersonating key developers, forcing changes to the PHP Group's infrastructure.

Her new coding book features glowing endorsements from philanthropist Melinda Gates; Jack Dorsey, the co-founder and CEO of Twitter; and Facebook’s chief operating officer, Sheryl Sandberg.