1- There are 2 books you need to have in your library.
Professional Web APIs with PHP
Pro PHP XML and Web Services

Those two are the best of breed as far as I’m concerned.

2- No. However, you can use the new filter extension in 5.2 to filter your input. I would suggest filter after you’ve imported it into something like SimpleXML. If there are any anomalies in the XML itself, SimpleXML and the like will refuse to validate it. Once you have a valid XML and you start pulling pieces out, run them through a filter for safety’s sake.

HTH,

=C=

1-I want to write a tutorial about SOAP,Which article do you suggest to read?

2- I heard about XML bomb and RSS ,Is there special function like mysql_real_escape that we use in order to prevent SQL injection,
for these attack?
Thanks,

…