There are a number security vulnerabilities any HTML programmer should be aware of: notably, cross-site scripting and SQL injection. We will discuss the matters in detailed using OWASP standards.
General Rules of Thumbs
NEVER Trust User Inputs at all, including those verified and authenticated users.