Hi guys, I asked a friend to try and hack my site to see how safe it is. He hasn't been able to get to the database or do any serious damage but he has used JS Injection to block my strip_tags(); function.
I would like to know how to stop that. He somehow got through and used the marquee tag. The thing is I only see one marquee tag but he somehow got it to work.