ABSTRACTWeb applications have turned into an indispensable piece of the day by day lives of a great many clients. Sadly, web applications are additionally habitually focused by assailants, and critical vulnerabilities, for example, XSS and SQL infusion are as yet normal. As a result, much exertion in the previous decade has been spent on mitigating web application vulnerabilities. Current systems center for the most part around disinfection: either on computerized sterilization, the location of missing sanitizers, the rightness of sanitizers, or the right situation of sanitizers. In any case, these procedures are either not ready to avert new types of info approval vulnerabilities, for example, HTTP Parameter Pollution, accompany huge runtime overhead, need accuracy, or require noteworthy alterations to the customer as well as server infrastructure. In this paper, we introduce IPAAS, a novel procedure for keeping the abuse of XSS and SQL infusion vulnerabilities in view of computerized information compose location of info parameters. IPAAS consequently and straightforwardly expands generally shaky web application improvement conditions within put validators that result in significant and tangible security improvements for real systems. We implemented IPAAS for PHP and assessed it on five genuine web applications with known XSS and SQL infusion vulnerabilities. Our assessment exhibits that IPAAS would have forestalled 83% of SQL infusion vulnerabilities and 65% of XSS vulnerabilities while causing no developer burden.Keywords: SQL Injection, Security and Privacy.