title: how can hackers inject javascript code to my homepage.php
body: <blockquote>
    <p><strong>Possible Duplicate:</strong><br>
    <a href="https://stackoverflow.com/questions/71328/what-are-the-best-practices-for-avoid-xss-attacks-in-a-php-site">What are the best practices for avoid xss attacks in a PHP site</a>  </p>
  </blockquote>
  
  
  
  <p>Hi,
  I wonder how can hackers inject this javascript code to my homepage.php</p>
  
  <pre><code>&lt;script type="text/javascript"&gt;document.write('\u003c\u0069\u006d\u0067\u0020\u0073\u0072\u0063\u003d\u0022\u0068\u0074\u0074\u0070\u003a\u002f\u002f\u0061\.........')&lt;/script&gt;
  </code></pre>
  
  <p>How can I block this?</p>