Help securing my site from XSS attacks
 

Hey all, I have a few questions about XSS security and i figured this might be a good place to ask. I don't know much about the issue, so i'd just like some reassurance. It doesn't pertain to vB necessarily, just php in general.

Ill try to explain... I have had many guests/bots on my forum attempting to, from what it looks like, trying to crack some security flaws in vBadvanced and other misc. php applications i have created that im running on my server. Here is an example in this screenshot:

http://www.iizerg.com/other/hax.jpg

in that .txt file is the following code:

PHP Code:


this particular one looks harmless to me. It is not just this.txt file the bots/guests try to link to, theres many different scrips that are attempted.

Basically, my question is, how can I secure my scripts i have coded from such kinds of attacks? I imagine vB itself is secure, but they seem to be attacking vbadvanced so i might ask over there on their site. I asked here for general security tips in php. thanks for any replies!