PHP Security Help

Some tips:

- Use htmlspecialchars() every time you must display content inserted in DB by an user.
- Use prepared statements every time you must insert data from the user in DB
- Be careful with cookies, and when you store password. Always encrypt + salt.