Web application security 2

How to defence attacks like SQL inject, XSS, CSRF:
There are lots ways. on way we could do is Input validation.
In PHP, there are lots of functions protecting from these attacks.


    // retrieve form data
    $username = sqlite_escape_string(htmlentities($_POST['username']));
    $password = sqlite_escape_string(htmlentities($_POST['password']));