There is a tool or maybe better, a server side script to check if your site is secure against SQL Injection / XSS ?
I’m Using PHP.
I looked a bit on google, but i’m asking you for a precise answer, and also because i don’t trust so much things found on google, since i am not really expecienced.
Yes, there are scanners that can check your application for common vulnerabilities. These will not prove that your application is secure, but still may be useful to find any security holes.
Edit: I had some success with IronWasp and Zap.