]]>http://www.tizag.com/
http://www.php.net/
http://www.w3schools.org/
Top Tips:
* Keep your code clean, everybody likes clean code.
* If ever the need occurs to develop software, try to keep PHP away from HTML, this may seem hard at first but there are many ways to do it.
]]>happy searching!
]]> that also helps]]>Corky
]]>When you filter input never try to worry about what characters to block, only worry about what characters you should let in. Use functions like preg_match or similar functions to specify rules where if the input is not between 0-9 and a-z or A-Z - strip it out silently or report an error to the user.
To clarify what that means specifically, is that you start off with a blacklist which blocks everything and then you only specifically allow the characters or other info you require.
If you're using php be sure to use mysql_real_escape_string before your database queries (all of them). That alone should prevent most if not all sql injection attacks.
Not if you're running PostgreSQL it won't. 
Use the specific *sql escape function fr your DB if creating your own code from scratch. The likes of PunBB have database layers so that the DB specific query is unnecessary. It uses one common name for all DB types.
The other thing I would say is even though it may take a while to get a grasp on coding secure code - most of it's quite simple. ALWAYS filter your input - from any source. And always do this on the server side - do not trust javascript since it runs on the client/visitor computer. When you filter input never try to worry about what characters to block, only worry about what characters you should let in. Use functions like preg_match or similar functions to specify rules where if the input is not between 0-9 and a-z or A-Z - strip it out silently or report an error to the user. If you're using php be sure to use mysql_real_escape_string before your database queries (all of them). That alone should prevent most if not all sql injection attacks.
]]> 99,99% you'll find what you want!]]>A usefull site is www.w3schools.com Which has a number of programming languages in.
]]>but i would like to learn, so if youve got any tips/useful codes please let me know
]]>