title: Ways I can protect my site excluding XSS and Sql injection?
body: <p><br>So, members of my website can post topics, replies, comments, edit them and so on. I always use <code>htmlspecialchars</code> and <code>addslashes</code> for html inputs to protect my site against XSS and SQL injection attacks. Is it enough or is there something more I miss?<br>
  Thanks.</p>