Visible flaws

Although the code we discussed in the previous sections will work, there are many loopholes in it. We will look into the different problems in the next chapters, however here let's see three of them here and also see how we can solve them:

• Validation
• Authentication
• No response in case of 404

Validation

Right now in our code, although we are using PDO prepare and bindValue() methods, it will just save it from SQL injection. However, we are not validating all fields in the case of insert and update. We need to validate that the title should be of a specific limit, the status should be either draft or published, and the user_id should be always one of IDs in the users table.

...