securing php in onsubmit code

Hi i am using a lot of php in chronoform html forms and onSubmit codes. Can anyone give me some tips on how to secure php from sql injections or other attacks.

will the following code (putting before any php code) take effect and do the trick or not:

defined('_JEXEC') or die('Restricted access');

i mean it is useful if written in php files, will it be still useful if we put it in chronoforms php?

any more tips?

I hope this post will be useful for everyone seeking peace from bad asses😉 .

Hi Ahmed,

the security rules applied to your code are the same applied everywhere else, please read about this online, the first thing to care about though is to use Joomla code classes when its available like when interacting with the database!

Regards
Max