Securing a PHP Form

[streammalvern]

Hi! I'm still kinda new to the PHP biz... I've been asked by a client to create an online application form where they are most likely going to ask the user for their SS#. I'll be using a phpMyAdmin database table to hold the info while also sending the info to a specified email address. I'm not all that worried on getting the info into the database table, but I'm a little lost on how to go about making a secured php form that will at least protect the user's SS# and possibly address and phone number... any ideas or sites anyone can suggest that can help me out?

[Motoma]

Hi! I'm still kinda new to the PHP biz... I've been asked by a client to create an online application form where they are most likely going to ask the user for their SS#. I'll be using a phpMyAdmin database table to hold the info while also sending the info to a specified email address. I'm not all that worried on getting the info into the database table, but I'm a little lost on how to go about making a secured php form that will at least protect the user's SS# and possibly address and phone number... any ideas or sites anyone can suggest that can help me out?

First: USE SSL.
Second: REQUIRE SSL
Third: Protect against SQL Injection
Fourth: Protect against Cross Site Scripting
Fifth: Protect against Session Hijacking
Sixth: Protect against Javascript Hijacking