Input Validation

The process of verifying and sanitizing all user-supplied data before it is processed by the application. Input validation is the first line of defense against SQL injection, XSS, command injection, and other injection attacks. It must be applied server-side, as client-side validation is easily bypassed.