The Pragmatic Programmer: Your Journey to Mastery, 20th Anniversary Edition

by Andy Hunt

Never trust data from an external entity, always sanitize it before passing it on to a database, view rendering, or other processing.