Hacker News Reader

Thanks for the feedback! Next in the development pipeline I have few of these issues. Basically this was evolved out of a small project (read Failed ). Next version will include * Clean database layer * Packaging * Template engine * xss protection (thanks to you!)

I have to consider your thoughts on extensions, in any case its the second priority.

View on HN

I know from personal experience how nasty raw PHP templating can be, in a sprawling codebase where no one ever considered that simply echoing variables that came from the database or from request variables might be a bad idea.

It makes even a simple framework more complicated but people use frameworks to not have to be bothered about that sort of thing.

You may want to take a look at this before proceeding: https://www.owasp.org/index.php/PHP_Security_Cheat_Sheet

Definitely, Since it was all personal requirement It was designed like this. I will start cleaning it up. and of course the cheat sheet will reduce lot of my research.

Reply on news.ycombinator.com