[ridiculous_leke]

I suggest going through cheatsheets on OWASP. Most of it is comprehensible to any web programmer. Here's one example:

https://cheatsheetseries.owasp.org/cheatsheets/PHP_Configura...