Form input security
| From: | Chris Cook | Date: | Sun, 09 Mar 2003 19:18:59 +0000 |
| Subject: | Form input security | ||
| Groups: | php.general | ||
| Request: | Send a blank email to php-general+get-138872@lists.php.net to get a copy of this message | ||
Hello all,
When using forms, when do I have to worry about cleaning up user data? I know to use escapeshellarg() when using system functions, but how about when using the user data for database inserts? Also, if I do not insert the data into the database or use any system commands, do I still need to clean the data?
Thanks,
Chris
_________________________________________________________________
Add photos to your e-mail with MSN 8. Get 2 months FREE*. http://join.msn.com/?page=features/featuredemail