[jarnix]

Here is the escaping :

https://github.com/enygma/shieldframework/blob/master/Shield...

at this line :

$value = htmlspecialchars($value);

[Kudos]

That could do with being mentioned in the README, a large part of the problem with PHP is developers not knowing what method to use to sanitise strings. After seeing striptags mentioned explicitly, I expected the worst.

[JohnHaugeland]

He used DES for session security.

That's the worst.

[Kudos]

https://github.com/enygma/shieldframework/commit/44d9fc7e981...