How to protect a Telegram bot?

Question

PHP

Hello! Lately I have been interested in writing bots in PHP, I have implemented my own mini-lib for working with TG based on API, it is very convenient. To work with the database, I use PDO, I store all confidential data exclusively in config files on the server, to which only I have access, there is a small protection against spam in the bot, all possible data is filtered. So, are there any ways to get into the bot / somehow hack it, and are there actually any other methods of additional protection?

Answer 1

all the same as for any site - sql injections in the first place. but believe the person developing the state. projects - even if no one is trying to hack mine, then yours is generally fucked up.