> 
> **Possible Duplicate:**  
> 
> [Best way to prevent SQL injection in PHP?](https://stackoverflow.com/questions/60174/best-way-to-prevent-sql-injection-in-php) 
> 
> 
> 

I am creating a news site and I have written down a list of things need for achieving security. 

User + Site interaction 

1. sanitize all POST/GET functions with html-entities & mysql\_real\_escape\_string
2. if site is about to be online, TURN OFF, error reporting or customize it
3. I don't use cookies, only sessions (Because sessions are less vulnerable)
4. turn off directory listing
5. make robot.txt to prevent indexing unwanted files
6. For passwords, use salt + Md5
7. only make ADMIN site accessible from one PC and one browser by getting ip, and browse info, otherwise throw in 404 Error.

I have implemented all those in my site. I know most of you will say use PDO / Msqli to sanitize, but I am a beginner in PHP and it is difficult for me to learn PDO/Mysqli or OOP

So, anything other you can provide will be awesome.
thanks.